CVE-2015-7813 — LOW (2.1) — White Hats Nepal

Vulnerability Description

Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercalls, which allows local guests to cause a denial of service via a sequence of (1) HYPERVISOR_physdev_op hypercalls, which are not properly handled in the do_physdev_op function in arch/arm/physdev.c, or (2) HYPERVISOR_hvm_op hypercalls, which are not properly handled in the do_hvm_op function in arch/arm/hvm.c.

CVSS Score

2.1

LOW

AV:L/AC:L/Au:N/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Xen	Xen	4.4.0

Related Weaknesses (CWE)

CWE-399

References

FAQ

What is CVE-2015-7813?

CVE-2015-7813 is a vulnerability with a CVSS score of 2.1 (LOW). Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercalls, which allows local guests to cause a denial of service via a sequence of (1) H...

How severe is CVE-2015-7813?

CVE-2015-7813 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-7813?

Check the references section above for vendor advisories and patch information. Affected products include: Xen Xen.