CVE-2015-4164: Medium severity xen xapi vulnerability

Published Jun 15, 2015

Updated

The compatiret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercalliret call with EFLAGS.VM set.

Affected Software

37 affected components

XEN Xen=3.1.3

XEN Xen=3.1.4

XEN Xen=3.2.0

XEN Xen=3.2.1

XEN Xen=3.2.2

XEN Xen=3.2.3

XEN Xen=3.3.0

XEN Xen=3.3.1

XEN Xen=3.3.2

XEN Xen=3.4.0

XEN Xen=3.4.1

XEN Xen=3.4.2

XEN Xen=3.4.3

XEN Xen=3.4.4

XEN Xen=4.0.0

XEN Xen=4.0.1

XEN Xen=4.0.2

XEN Xen=4.0.3

XEN Xen=4.0.4

XEN Xen=4.1.0

XEN Xen=4.1.1

XEN Xen=4.1.2

XEN Xen=4.1.3

XEN Xen=4.1.4

XEN Xen=4.1.5

XEN Xen=4.1.6.1

XEN Xen=4.2.0

XEN Xen=4.2.1

XEN Xen=4.2.2

XEN Xen=4.2.3

XEN Xen=4.3.0

XEN Xen=4.3.1

XEN Xen=4.3.4

XEN Xen=4.4.0

XEN Xen=4.4.0-rc1

XEN Xen=4.4.1

XEN Xen=4.5.0

Event History

Jun 15, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4164?

CVE-2015-4164 has a severity rating that could lead to a denial of service due to a large loop and potential system hang.

How do I fix CVE-2015-4164?

To fix CVE-2015-4164, it is recommended to upgrade to a later version of Xen that addresses this vulnerability.

Which software versions are affected by CVE-2015-4164?

CVE-2015-4164 affects Xen versions 3.1 through 4.5, including specific minor versions within that range.

What kind of attack does CVE-2015-4164 enable?

CVE-2015-4164 allows local 32-bit PV guest administrators to cause a denial of service via a specific hypercall.

Is there a workaround for CVE-2015-4164?

No specific workaround is documented for CVE-2015-4164; upgrading to a patched version is the best course of action.