Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-5307
HistoryNov 16, 2015 - 11:59 a.m.

CVE-2015-5307

2015-11-1611:59:05
CWE-399
[email protected]
web.nvd.nist.gov
6

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

31.8%

JSON

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

Affected configurations

Nvd
Node
linuxlinux_kernelRange≤4.2.3
Node
xenxenMatch4.3.0
OR
xenxenMatch4.3.1
OR
xenxenMatch4.3.2
OR
xenxenMatch4.3.3
OR
xenxenMatch4.3.4
OR
xenxenMatch4.4.0
OR
xenxenMatch4.4.1
OR
xenxenMatch4.4.2
OR
xenxenMatch4.4.3
OR
xenxenMatch4.4.4
OR
xenxenMatch4.5.0
OR
xenxenMatch4.5.1
OR
xenxenMatch4.5.2
OR
xenxenMatch4.5.3
OR
xenxenMatch4.5.5
OR
xenxenMatch4.6.0
OR
xenxenMatch4.6.1
OR
xenxenMatch4.6.2
OR
xenxenMatch4.6.3
OR
xenxenMatch4.6.4
OR
xenxenMatch4.6.5
OR
xenxenMatch4.6.6
Node
oraclevm_virtualboxRange4.0.0–4.0.34
OR
oraclevm_virtualboxRange4.1.0–4.1.42
OR
oraclevm_virtualboxRange4.2.0–4.2.34
OR
oraclevm_virtualboxRange4.3.0–4.3.29
OR
oraclevm_virtualboxRange5.0.0–5.0.8
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch15.10
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
xenxen4.3.0cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
xenxen4.3.1cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*
xenxen4.3.2cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*
xenxen4.3.3cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*
xenxen4.3.4cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*
xenxen4.4.0cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
xenxen4.4.1cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*
xenxen4.4.2cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*
xenxen4.4.3cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*
Rows per page:
1-10 of 291

References

Related

openvas 52
nessus 67
ubuntu 8
cvelist 1
debiancve 1
cve 1
ubuntucve 1
prion 1
fedora 6
freebsd 1
oraclelinux 5
redhat 7
centos 2
xen 1
f5 2
mageia 7
debian 5
osv 3
kaspersky 1
suse 13
oracle 1
openvas
openvas
Ubuntu: Security Advisory (USN-2800-1)
2015-11-10 00:00:00
Ubuntu: Security Advisory (USN-2802-1)
2015-11-10 00:00:00
Ubuntu: Security Advisory (USN-2804-1)
2015-11-10 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-2801-1)
2015-11-10 00:00:00
Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerability (USN-2806-1)
2015-11-10 00:00:00
Ubuntu 12.04 LTS : linux vulnerability (USN-2800-1)
2015-11-10 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2015-11-10 00:00:00
Linux kernel (Vivid HWE) vulnerability
2015-11-10 00:00:00
Linux kernel (Utopic HWE) vulnerability
2015-11-10 00:00:00
cvelist
cvelist
CVE-2015-5307
2015-11-16 11:00:00
debiancve
debiancve
CVE-2015-5307
2015-11-16 11:59:05
cve
cve
CVE-2015-5307
2015-11-16 11:59:05
ubuntucve
ubuntucve
CVE-2015-5307
2015-11-10 00:00:00
prion
prion
Design/Logic Flaw
2015-11-16 11:59:00
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.2-2.fc22
2015-11-21 16:55:05
[SECURITY] Fedora 21 Update: xen-4.4.3-8.fc21
2015-11-20 23:26:59
[SECURITY] Fedora 23 Update: xen-4.5.2-2.fc23
2015-11-23 00:30:31
freebsd
freebsd
xen-kernel -- CPU lockup during exception delivery
2015-11-10 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2015-12-10 00:00:00
kernel security and bug fix update
2015-12-08 00:00:00
Unbreakable Enterprise kernel security update
2016-01-08 00:00:00
redhat
redhat
(RHSA-2015:2552) Important: kernel security and bug fix update
2015-12-08 10:11:52
(RHSA-2016:0004) Important: kernel security update
2016-01-07 00:00:00
(RHSA-2016:0046) Important: kernel security update
2016-01-19 00:00:00
centos
centos
kernel, perf, python security update
2015-12-09 19:18:47
kernel, perf, python security update
2015-12-16 00:07:51
xen
xen
x86: CPU lockup during exception delivery
2015-11-10 00:01:00
f5
f5
K31026324 : Linux kernel vulnerabilities CVE-2015-2925, CVE-2015-5307, and CVE-2015-8104
2016-01-13 00:00:00
SOL31026324 - Linux kernel vulnerabilities CVE-2015-2925, CVE-2015-5307, and CVE-2015-8104
2016-01-13 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2015-11-20 01:08:19
Updated kernel-linus packages fix security vulnerabilities
2016-01-14 04:44:39
Updated kernel-linus packages fix security vulnerabilities
2016-06-22 22:08:04
debian
debian
[SECURITY] [DSA 3454-1] virtualbox security update
2016-01-26 23:24:54
[SECURITY] [DSA 3396-1] linux security update
2015-11-10 08:08:51
[SECURITY] [DSA 3396-1] linux security update
2015-11-10 08:08:51
osv
osv
linux - security update
2015-11-10 00:00:00
xen - security update
2016-05-17 00:00:00
xen-4.7.0_12-1.3 on GA media
2024-06-15 00:00:00
kaspersky
kaspersky
KLA10744 Multiple vulnerabilities in Oracle VM VirtualBox
2016-02-21 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2015-11-26 13:10:56
Security update for the Linux Kernel (important)
2016-02-05 21:12:31
Security update for the Linux Kernel (important)
2015-12-04 14:10:52
oracle
oracle
Oracle Critical Patch Update - January 2016
2016-01-19 00:00:00

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

31.8%

JSON
Related for NVD:CVE-2015-5307
openvas52nessus67ubuntu8cvelist1debiancve1cve1ubuntucve1prion1fedora6freebsd1oraclelinux5redhat7centos2xen1f52mageia7debian5osv3kaspersky1suse13oracle1