CVE-2015-4106 in XenSource Xen
Summary
QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.
Reservation
05/27/2015
Disclosure
06/03/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75683 | XenSource Xen PCI Config access control | 284 | Unproven | Official fix | CVE-2015-4106 |