CVE-2015-7969 — MEDIUM (4.9)

Vulnerability Description

Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall.

CVSS Score

4.9

MEDIUM

AV:L/AC:L/Au:N/C:N/I:N/A:C

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Xen	Xen	4.0.0

Related Weaknesses (CWE)

CWE-399

References

FAQ

What is CVE-2015-7969?

CVE-2015-7969 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" o...

How severe is CVE-2015-7969?

CVE-2015-7969 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-7969?

Check the references section above for vendor advisories and patch information. Affected products include: Xen Xen.