CVE-2015-8551 (Medium) detected in linux-stable-rtv4.1.33 - autoclosed

[mend-bolt-for-github[bot]]

CVE-2015-8551 - Medium Severity Vulnerability

Vulnerable Library - linux-stable-rtv4.1.33

Julia Cartwright's fork of linux-stable-rt.git

Library home page: https://git.kernel.org/pub/scm/linux/kernel/git/julia/linux-stable-rt.git

Found in HEAD commit: 32145daf0c96b012284199f23418243e0168269f

Found in base branch: main

Vulnerable Source Files (2)

/drivers/xen/xen-pciback/pciback_ops.c /drivers/xen/xen-pciback/pciback_ops.c

Vulnerability Details

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."

Publish Date: 2016-04-13

URL: CVE-2015-8551

CVSS 3 Score Details (6.0)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: High - User Interaction: None - Scope: Changed - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8551

Release Date: 2016-04-13

Fix Resolution: v4.4-rc6

---

Step up your Open Source Security Game with Mend here

[mend-bolt-for-github[bot]]

:information_source: This issue was automatically closed by Mend because it is a duplicate of an existing issue: #849