CVE-2015-2756
- State
- Published
- Severity
- Not scored
- Published
- Apr 1, 2015
- Updated
- Aug 6, 2024
- Reserved
- Mar 27, 2015
Description
QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow local HVM guest users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 72577vdb-entry
- GLSA-201504-04vendor-advisory
- https://support.citrix.com/article/CTX206006
- DSA-3259vendor-advisory
- FEDORA-2015-5295vendor-advisory
- FEDORA-2015-5208vendor-advisory
- http://support.citrix.com/article/CTX201145
- [Qemu-devel] 20150331 [PATCH][XSA-126] xen: limit guest control of PCI command registermailing-list
- http://xenbits.xen.org/xsa/advisory-126.html
- openSUSE-SU-2015:0732vendor-advisory
- USN-2608-1vendor-advisory
- 1031998vdb-entry
- FEDORA-2015-5402vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.