CVE Feed

    Dashboard / CVE / CVE-2015-8550

    CVE-2015-8550

    Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.

    Published:Dec 17, 2015
    Last Modified:Apr 12, 2025
    EPS:Apr 14, 2016
    EPSS Score:0.15964
    CVSS Score:8.2

    Affected Products

    Vendor
    Novell
    Product
    Suse Linux Enterprise Real Time Extension
    Vendor
    Xen
    Product
    Xen

    Exploits

    https://github.com/WhatsWrongAndWhy/CVE-2015-8550

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2016-5829 (CVSS 7.8) — Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the …
    CVE-2016-4997 (CVSS 7.8) — The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in…
    CVE-2016-5828 (CVSS 7.8) — The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platfo…
    CVE-2016-4470 (CVSS 5.5) — The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that…
    CVE-2016-3707 (CVSS 8.1) — The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, a…
    CVE-2016-4569 (CVSS 5.5) — The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a…
    CVE-2016-4486 (CVSS 3.3) — The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize…
    CVE-2016-4482 (CVSS 6.2) — The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize …
    CVE-2016-3672 (CVSS 7.8) — The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly r…
    CVE-2016-3689 (CVSS 4.6) — The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows ph…

    References

    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
    http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
    http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html
    http://www.debian.org/security/2016/dsa-3434
    http://www.debian.org/security/2016/dsa-3471
    http://www.debian.org/security/2016/dsa-3519
    http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
    http://www.securityfocus.com/bid/79592
    http://www.securitytracker.com/id/1034479
    http://xenbits.xen.org/xsa/advisory-155.html
    https://security.gentoo.org/glsa/201604-03
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
    http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
    http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html
    http://www.debian.org/security/2016/dsa-3434
    http://www.debian.org/security/2016/dsa-3471
    http://www.debian.org/security/2016/dsa-3519
    http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
    http://www.securityfocus.com/bid/79592
    http://www.securitytracker.com/id/1034479
    http://xenbits.xen.org/xsa/advisory-155.html
    https://security.gentoo.org/glsa/201604-03

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High