CVE-2015-2751

Published: Apr 1, 2015Modified: May 6, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service (host lock) via unspecified domctl operations.

Affected (9)

Products: Xen: Xen · Fedoraproject: Fedora

1 product

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.3.0
Xen Xen	Version 4.3.1
Xen Xen	Version 4.3.2
Xen Xen	Version 4.4.0
Xen Xen	Version 4.4.0 rc1
Xen Xen	Version 4.4.1
Xen Xen	Version 4.5.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 20
Fedoraproject Fedora	Version 21

Related CWEs

CWE-17

References (16)

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154574.html

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154579.html

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155198.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/73443

Source: cve@mitre.org

http://www.securitytracker.com/id/1031997

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://xenbits.xen.org/xsa/advisory-127.html

Source: cve@mitre.org

PatchVendor Advisory

https://security.gentoo.org/glsa/201504-04

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154574.html