CVE-2015-4163 in Xen
Résumé (Anglaise)
GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local guest domains to cause a denial of service (NULL pointer dereference) via a hypercall without a GNTTABOP_setup_table or GNTTABOP_set_version.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Réserver
02/06/2015
Divulgation
15/06/2015
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 75853 | XenSource Xen GNTTABOP_swap_grant_ref déni de service | 476 | Non prouvée | Correctif officiel | CVE-2015-4163 |