NetSight
IP …
medium4.9

CVE-2015-4103

Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a …

Impact

Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.

Affected products

VendorProductAffected versions
XenXen
Versions 3.3.0, 3.3.1, 3.3.2, 3.4.0, 3.4.1, 3.4.2

Weakness classification

CWE-264

References