CVE-2015-8340: Medium severity xen xapi vulnerability
Published Dec 17, 2015
·Updated
The memoryexchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEMexchange error handling.
Affected Software
44 affected components
XEN Xen=3.2.0
XEN Xen=3.2.1
XEN Xen=3.2.2
XEN Xen=3.2.3
XEN Xen=3.3.0
XEN Xen=3.3.1
XEN Xen=3.3.2
XEN Xen=3.4.0
XEN Xen=3.4.1
XEN Xen=3.4.2
XEN Xen=3.4.3
XEN Xen=3.4.4
XEN Xen=4.0.0
XEN Xen=4.0.1
XEN Xen=4.0.2
XEN Xen=4.0.3
XEN Xen=4.0.4
XEN Xen=4.1.0
XEN Xen=4.1.1
XEN Xen=4.1.2
XEN Xen=4.1.3
XEN Xen=4.1.4
XEN Xen=4.1.5
XEN Xen=4.1.6
XEN Xen=4.1.6.1
XEN Xen=4.2.0
XEN Xen=4.2.1
XEN Xen=4.2.2
XEN Xen=4.2.3
XEN Xen=4.2.4
XEN Xen=4.2.5
XEN Xen=4.3.0
XEN Xen=4.3.1
XEN Xen=4.3.2
XEN Xen=4.3.3
XEN Xen=4.3.4
XEN Xen=4.4.0
XEN Xen=4.4.1
XEN Xen=4.4.2
XEN Xen=4.4.3
XEN Xen=4.5.0
XEN Xen=4.5.1
XEN Xen=4.5.2
XEN Xen=4.6.0
Remediation
Patch Available
Event History
Dec 17, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8340?
CVE-2015-8340 has a medium severity level, primarily leading to potential denial of service.
2
How do I fix CVE-2015-8340?
To fix CVE-2015-8340, upgrade to a version of Xen that is not affected, specifically Xen 4.7.0 or later.
3
Which versions of Xen are affected by CVE-2015-8340?
CVE-2015-8340 affects Xen versions 3.2.x through 4.6.x.
4
What kind of exploit can occur from CVE-2015-8340?
CVE-2015-8340 can cause a denial of service due to deadlock or host crash.
5
Who can be impacted by CVE-2015-8340?
Guest OS administrators in environments running vulnerable versions of Xen can be affected by CVE-2015-8340.