CVE - CVE-2015-8552

CVE-ID
CVE-2015-8552	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://xenbits.xen.org/xsa/advisory-157.html DEBIAN:DSA-3434 URL:http://www.debian.org/security/2016/dsa-3434 GENTOO:GLSA-201604-03 URL:https://security.gentoo.org/glsa/201604-03 SUSE:SUSE-SU-2016:1707 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html SUSE:SUSE-SU-2016:1764 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html SUSE:SUSE-SU-2016:1937 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html SUSE:SUSE-SU-2016:2105 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html SUSE:openSUSE-SU-2016:2184 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html SUSE:SUSE-SU-2016:0911 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html SUSE:SUSE-SU-2016:1102 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html BID:79546 URL:http://www.securityfocus.com/bid/79546 SECTRACK:1034480 URL:http://www.securitytracker.com/id/1034480
Assigning CNA
N/A
Date Entry Created
20151214	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20151214)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org