CVE-2015-8615: Medium severity xen xapi vulnerability

Published Jan 8, 2016

Updated

The hvmsetcallbackvia function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVMPARAMCALLBACKIRQ).

Affected Software

1 affected component

XEN Xen=4.6.0

Event History

Jan 8, 2016

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-8615?

CVE-2015-8615 is classified as a denial of service vulnerability.

How do I fix CVE-2015-8615?

To fix CVE-2015-8615, you should update to a patched version of Xen that addresses this vulnerability.

Who is affected by CVE-2015-8615?

CVE-2015-8615 affects local HVM guest OS users running Xen 4.6.0.

What causes the CVE-2015-8615 vulnerability?

CVE-2015-8615 is caused by the hvm_set_callback_via function not limiting the number of printk messages, leading to potential denial of service.

Is there a workaround for CVE-2015-8615?

While the best course of action is to update, temporarily restricting access to the callback method can serve as a workaround for CVE-2015-8615.