CVE-2015-8551

MEDIUM Year: 2015
CVSS v3 Score
6.0
Medium
CVSS v2 Score
4.7
Medium
Weakness Type
CWE-476
View all →

Vulnerability Description

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."

Related Vulnerabilities

CVE-2015-7549

MEDIUM
CVSS:6.0(Medium)

The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging...

CWE-4762015

CVE-2020-29484

MEDIUM
CVSS:6.0(Medium)

An issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client that registered the watch will receive a Xenstore message containing the path of the modified Xenstore e...

CWE-4762020

CVE-2020-35503

MEDIUM
CVSS:6.0(Medium)

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callbac...

CWE-4762020

CVE-2020-35504

MEDIUM
CVSS:6.0(Medium)

A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a...

CWE-4762020

CVE-2021-4158

MEDIUM
CVSS:6.0(Medium)

A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of s...

CWE-4762021

CVE-2015-5316

MEDIUM
CVSS:5.9(Medium)

The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a den...

CWE-4762015