CVE-2015-4105: Medium severity xen xapi vulnerability
Published Jun 3, 2015
·Updated
Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service (host disk consumption) via certain invalid operations.
Affected Software
31 affected components
XEN Xen=3.3.0
XEN Xen=3.3.1
XEN Xen=3.3.2
XEN Xen=3.4.0
XEN Xen=3.4.1
XEN Xen=3.4.2
XEN Xen=3.4.3
XEN Xen=3.4.4
XEN Xen=4.0.0
XEN Xen=4.0.1
XEN Xen=4.0.2
XEN Xen=4.0.3
XEN Xen=4.0.4
XEN Xen=4.1.0
XEN Xen=4.1.1
XEN Xen=4.1.2
XEN Xen=4.1.3
XEN Xen=4.1.4
XEN Xen=4.1.5
XEN Xen=4.1.6.1
XEN Xen=4.2.0
XEN Xen=4.2.1
XEN Xen=4.2.2
XEN Xen=4.2.2
XEN Xen=4.3.0
XEN Xen=4.3.1
XEN Xen=4.3.2
XEN Xen=4.3.4
XEN Xen=4.4.0
XEN Xen=4.4.1
XEN Xen=4.5.0
Event History
Jun 3, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4105?
CVE-2015-4105 has a medium severity rating due to the potential for denial of service.
2
How do I fix CVE-2015-4105?
To fix CVE-2015-4105, upgrade to a patched version of Xen beyond 4.5.x.
3
What versions of Xen are affected by CVE-2015-4105?
CVE-2015-4105 affects Xen versions 3.3.x through 4.5.x.
4
What kind of vulnerabilities does CVE-2015-4105 introduce?
CVE-2015-4105 allows for host disk consumption through improper logging of PCI MSI-X pass-through errors.
5
Is CVE-2015-4105 an exploit that needs immediate attention?
Yes, CVE-2015-4105 should be addressed promptly to prevent possible denial of service caused by guest operations.