CVE-2015-8615
The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ).
- Score
- CVSS 3.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2016-01-08
- Last modified
- 2024-08-06
- Weaknesses
- CWE-254
Affected products
References
- http://www.securityfocus.com/bid/79644
- http://www.securitytracker.com/id/1034512
- http://xenbits.xen.org/xsa/advisory-169.html
