| Vulnerability Name: | CVE-2015-7813 (CCN-107665) | ||||||||||||||||
| Assigned: | 2015-10-29 | ||||||||||||||||
| Published: | 2015-10-29 | ||||||||||||||||
| Updated: | 2018-10-30 | ||||||||||||||||
| Summary: | Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercalls, which allows local guests to cause a denial of service via a sequence of (1) HYPERVISOR_physdev_op hypercalls, which are not properly handled in the do_physdev_op function in arch/arm/physdev.c, or (2) HYPERVISOR_hvm_op hypercalls, which are not properly handled in the do_hvm_op function in arch/arm/hvm.c. | ||||||||||||||||
| CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) 3.5 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)
| ||||||||||||||||
| CVSS v2 Severity: | 2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||||||||||
| Vulnerability Type: | CWE-399 | ||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2015-7813 Source: FEDORA Type: UNKNOWN FEDORA-2015-a931b02be2 Source: FEDORA Type: UNKNOWN FEDORA-2015-6f6b79efe2 Source: FEDORA Type: UNKNOWN FEDORA-2015-242be2c240 Source: DEBIAN Type: UNKNOWN DSA-3414 Source: SECTRACK Type: UNKNOWN 1034029 Source: CCN Type: Xen Security Advisory XSA-146 arm: various unimplemented hypercalls log without rate limiting Source: CONFIRM Type: Vendor Advisory http://xenbits.xen.org/xsa/advisory-146.html Source: XF Type: UNKNOWN xen-cve20157813-dos(107665) Source: GENTOO Type: UNKNOWN GLSA-201604-03 Source: CCN Type: WhiteSource Vulnerability Database CVE-2015-7813 | ||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||
| Oval Definitions | |||||||||||||||||
| |||||||||||||||||
| BACK | |||||||||||||||||