CVE-2015-7813: Low severity xen xapi vulnerability
Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercalls, which allows local guests to cause a denial of service via a sequence of (1) HYPERVISORphysdevop hypercalls, which are not properly handled in the dophysdevop function in arch/arm/physdev.c, or (2) HYPERVISORhvmop hypercalls, which are not properly handled in the dohvmop function in arch/arm/hvm.c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7813?
CVE-2015-7813 is classified as a medium severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2015-7813?
To fix CVE-2015-7813, update your Xen hypervisor to a version that includes the patch addressing this vulnerability.
What versions of Xen are affected by CVE-2015-7813?
CVE-2015-7813 affects Xen versions 4.4.x, 4.5.x, and 4.6.x.
What type of attack does CVE-2015-7813 enable?
CVE-2015-7813 enables local guests to perform a denial of service attack by exploiting unimplemented hypercalls.
What component of Xen is impacted by CVE-2015-7813?
CVE-2015-7813 impacts the handling of HYPERVISOR_physdev_op hypercalls in the do_physdev_op function.