CVE - CVE-2015-8551

CVE-ID
CVE-2015-8551	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:79546 URL:http://www.securityfocus.com/bid/79546 CONFIRM:http://xenbits.xen.org/xsa/advisory-157.html DEBIAN:DSA-3434 URL:http://www.debian.org/security/2016/dsa-3434 GENTOO:GLSA-201604-03 URL:https://security.gentoo.org/glsa/201604-03 SECTRACK:1034480 URL:http://www.securitytracker.com/id/1034480 SUSE:SUSE-SU-2016:0911 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html SUSE:SUSE-SU-2016:1102 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html SUSE:SUSE-SU-2016:1707 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html SUSE:SUSE-SU-2016:1764 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html SUSE:SUSE-SU-2016:1937 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html SUSE:SUSE-SU-2016:2105 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html SUSE:openSUSE-SU-2016:2184 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
Assigning CNA
MITRE Corporation
Date Record Created
20151214	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20151214)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)