CVE-2015-2150

Published: Mar 12, 2015Modified: May 6, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.

Affected (32)

Products: Ubuntu: Ubuntu · Xen: Xen · Linux: Linux Kernel

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ubuntu Ubuntu	Version 12.04

Configuration B

30 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 3.3.0
Xen Xen	Version 3.3.1
Xen Xen	Version 3.3.2
Xen Xen	Version 3.4.0
Xen Xen	Version 3.4.1
Xen Xen	Version 3.4.2
Xen Xen	Version 3.4.3
Xen Xen	Version 3.4.4
Xen Xen	Version 4.0.0
Xen Xen	Version 4.0.1
Xen Xen	Version 4.0.2
Xen Xen	Version 4.0.3
Xen Xen	Version 4.0.4
Xen Xen	Version 4.1.0
Xen Xen	Version 4.1.1
Xen Xen	Version 4.1.2
Xen Xen	Version 4.1.3
Xen Xen	Version 4.1.4
Xen Xen	Version 4.1.5
Xen Xen	Version 4.1.6.1
Xen Xen	Version 4.2.0
Xen Xen	Version 4.2.1
Xen Xen	Version 4.2.2
Xen Xen	Version 4.2.3
Xen Xen	Version 4.3.0
Xen Xen	Version 4.3.1
Xen Xen	Version 4.4.0
Xen Xen	Version 4.4.0 rc1
Xen Xen	Version 4.4.1
Xen Xen	Version 4.5.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.19.1

Related CWEs

References (42)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=af6fc858a35b90e89ea7a7ee58e66628c55c776b

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3237

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/73014

Source: cve@mitre.org

http://www.securitytracker.com/id/1031806

Source: cve@mitre.org

http://www.securitytracker.com/id/1031902

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2631-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2632-1

Source: cve@mitre.org

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm

Source: cve@mitre.org

http://xenbits.xen.org/xsa/advisory-120.html

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1196266

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/af6fc858a35b90e89ea7a7ee58e66628c55c776b

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/Aug/18

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=af6fc858a35b90e89ea7a7ee58e66628c55c776b

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3237

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/73014

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031806

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031902

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2631-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2632-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://xenbits.xen.org/xsa/advisory-120.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1196266

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/af6fc858a35b90e89ea7a7ee58e66628c55c776b

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Aug/18

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.