CVE-2015-2151: High severity red hat fedora vulnerability
The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2151?
CVE-2015-2151 has a critical severity rating due to its potential for memory corruption and arbitrary code execution.
How do I fix CVE-2015-2151?
To fix CVE-2015-2151, you should apply the latest security patches provided by your vendor for the affected versions of Xen and relevant operating systems.
Who is affected by CVE-2015-2151?
CVE-2015-2151 affects users of Xen versions 3.2.x to 4.5.x and certain Fedora and Debian versions.
What are the consequences of exploiting CVE-2015-2151?
Exploiting CVE-2015-2151 can lead to sensitive information disclosure, denial of service due to memory corruption, or even arbitrary code execution.
Is CVE-2015-2151 a local or remote vulnerability?
CVE-2015-2151 is categorized as a local vulnerability, meaning that it can only be exploited by users with local access to the guest environment.