← Back

CVE-2015-4103

nvd nist
Published: Jun 3, 2015Modified: May 6, 2026

JSON object

Loading...
4.9
Vector
AV:L/AC:L/Au:N/C:N/I:N/A:C
Exploitability: 3.9 / Impact: 6.9
Source: NVD

Description

Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.

Affected (30)

Products: Xen: Xen
1 product
Xen
Configuration A
30 vulnerable
Vulnerable SoftwareAffected Versions
Xen
Version 3.3.0
Version 3.3.1
Version 3.3.2
Version 3.4.0
Version 3.4.1
Version 3.4.2
Version 3.4.3
Version 3.4.4
Version 4.0.1
Version 4.0.2
Version 4.0.3
Version 4.0.4
Version 4.1.0
Version 4.1.1
Version 4.1.2
Version 4.1.3
Version 4.1.4
Version 4.1.5
Version 4.1.6.1
Version 4.2.0
Version 4.2.1
Version 4.2.2
Version 4.2.3
Version 4.3.0
Version 4.3.1
Version 4.3.2
Version 4.3.4
Version 4.4.0
Version 4.4.1
Version 4.5.0

Related CWEs

References (32)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.