https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:41:33 +0000 https://vulnerability.circl.lu/vuln/cve-2015-8550 <p>Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.</p> <p>Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.</p> https://vulnerability.circl.lu/vuln/cve-2015-8550 https://vulnerability.circl.lu/vuln/usn-2848-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Felix Wilhelm discovered a race condition in the Xen paravirtualized drivers which can cause double fetch vulnerabilities. An attacker in the paravirtualized guest could exploit this flaw to cause a denial of service (crash the host) or potentially execute arbitrary code on the host. (CVE-2015-8550)</p> <p>Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform consistency checks on the device&#39;s state. An attacker could exploit this flaw to cause a denial of service (NULL dereference) on the host. (CVE-2015-8551)</p> <p>Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform consistency checks on the device&#39;s state. An attacker could exploit this flaw to cause a denial of service by flooding the logging system with WARN() messages causing the initial domain to exhaust disk space. (CVE-2015-8552)</p> <p>Jann Horn discovered a ptrace issue with user namespaces in the Linux kernel. The namespace owner could potentially exploit this flaw by ptracing a root owned process entering the user namespace to elevate its privileges and potentially gain access outside of the namespace. (http://bugs.launchpad.net/bugs/1527374, CVE-2015-8709)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Felix Wilhelm discovered a race condition in the Xen paravirtualized drivers which can cause double fetch vulnerabilities. An attacker in the paravirtualized guest could exploit this flaw to cause a denial of service (crash the host) or potentially execute arbitrary code on the host. (CVE-2015-8550)</p> <p>Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform consistency checks on the device&#39;s state. An attacker could exploit this flaw to cause a denial of service (NULL dereference) on the host. (CVE-2015-8551)</p> <p>Konrad Rzeszutek Wilk discovered the Xen PCI backend driver does not perform consistency checks on the device&#39;s state. An attacker could exploit this flaw to cause a denial of service by flooding the logging system with WARN() messages causing the initial domain to exhaust disk space. (CVE-2015-8552)</p> <p>Jann Horn discovered a ptrace issue with user namespaces in the Linux kernel. The namespace owner could potentially exploit this flaw by ptracing a root owned process entering the user namespace to elevate its privileges and potentially gain access outside of the namespace. (http://bugs.launchpad.net/bugs/1527374, CVE-2015-8709)</p> https://vulnerability.circl.lu/vuln/usn-2848-1