CVE-2015-8339: Medium severity xen xapi vulnerability
Published Dec 17, 2015
·Updated
The memoryexchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domain, which might allow guest OS administrators to cause a denial of service (host crash) via unspecified vectors related to domain teardown.
Affected Software
44 affected components
XEN Xen=3.2.0
XEN Xen=3.2.1
XEN Xen=3.2.2
XEN Xen=3.2.3
XEN Xen=3.3.0
XEN Xen=3.3.1
XEN Xen=3.3.2
XEN Xen=3.4.0
XEN Xen=3.4.1
XEN Xen=3.4.2
XEN Xen=3.4.3
XEN Xen=3.4.4
XEN Xen=4.0.0
XEN Xen=4.0.1
XEN Xen=4.0.2
XEN Xen=4.0.3
XEN Xen=4.0.4
XEN Xen=4.1.0
XEN Xen=4.1.1
XEN Xen=4.1.2
XEN Xen=4.1.3
XEN Xen=4.1.4
XEN Xen=4.1.5
XEN Xen=4.1.6
XEN Xen=4.1.6.1
XEN Xen=4.2.0
XEN Xen=4.2.1
XEN Xen=4.2.2
XEN Xen=4.2.3
XEN Xen=4.2.4
XEN Xen=4.2.5
XEN Xen=4.3.0
XEN Xen=4.3.1
XEN Xen=4.3.2
XEN Xen=4.3.3
XEN Xen=4.3.4
XEN Xen=4.4.0
XEN Xen=4.4.1
XEN Xen=4.4.2
XEN Xen=4.4.3
XEN Xen=4.5.0
XEN Xen=4.5.1
XEN Xen=4.5.2
XEN Xen=4.6.0
Remediation
Patch Available
Event History
Dec 17, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8339?
CVE-2015-8339 is classified as a denial of service vulnerability.
2
How do I fix CVE-2015-8339?
To mitigate CVE-2015-8339, upgrade to the latest version of Xen where the vulnerability is patched.
3
What versions of Xen are affected by CVE-2015-8339?
CVE-2015-8339 affects Xen versions from 3.2.x through 4.6.x.
4
What is the impact of CVE-2015-8339?
CVE-2015-8339 may allow guest OS administrators to crash the host system.
5
Who can be exploited by CVE-2015-8339?
Guest OS administrators on the affected Xen versions can exploit CVE-2015-8339.