CVE-2015-7971

CVE Details

Release Date:	2015-10-30
Impact:	Low	What is this?

Description

Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c.

See more information about CVE-2015-7971 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	2.1
Vector String:	AV:L/AC:L/Au:N/C:N/I:N/A:P
Version:	2.0
Attack Vector:	Local
Attack Complexity:	Low
Authentication:	None
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	Partial

Errata information

Platform	Errata	Release Date
Oracle VM version 3.2 (xen)	OVMSA-2015-0142	2015-10-29
Oracle VM version 3.2 (xen)	OVMSA-2015-0143	2015-11-06
Oracle VM version 3.3 (xen)	OVMSA-2015-0141	2015-10-29