Lucene search

K
cveMitreCVE-2015-7814
HistoryOct 30, 2015 - 3:59 p.m.

CVE-2015-7814

2015-10-3015:59:03
CWE-119
CWE-362
mitre
web.nvd.nist.gov
55
xen
security
race condition
denial of service
cve-2015-7814
nvd

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.7%

Race condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier allows local domains with partial management control to cause a denial of service (host crash) via vectors involving the destruction of a domain and using XENMEM_decrease_reservation to reduce the memory of the domain.

Affected configurations

Nvd
Node
xenxenRange4.6.0
VendorProductVersionCPE
xenxen*cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.7%