CVE-2015-8340

Xen 3.2.x-4.6.x - Denial of Service via Memory Exchange Lock Mismanagement

Title source: llm
STIX 2.1

Description

The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.

References (6)

Core 6
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2016/dsa-3519
Vendor Advisory x_refsource_confirm
http://xenbits.xen.org/xsa/advisory-159.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034391
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201604-03
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/79038

Scores

EPSS 0.0007
EPSS Percentile 22.0%

Details

CWE
CWE-17
Status published
Products (44)
xen/xen 3.2.0
xen/xen 3.2.1
xen/xen 3.2.2
xen/xen 3.2.3
xen/xen 3.3.0
xen/xen 3.3.1
xen/xen 3.3.2
xen/xen 3.4.0
xen/xen 3.4.1
xen/xen 3.4.2
... and 34 more
Published Dec 17, 2015
Tracked Since Feb 18, 2026