NetSight
IP …
medium4.9

CVE-2015-4163

GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local guest domains to cause a denial of service …

Impact

GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local guest domains to cause a denial of service (NULL pointer dereference) via a hypercall without a GNTTABOP_setup_table or GNTTABOP_set_version.

Affected products

VendorProductAffected versions
XenXen
Versions 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1

References