xen: potential unintended writes to host MSI message data field via qemu (xsa-128)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-3284-1 | qemu security update |
Debian DSA |
DSA-3286-1 | xen security update |
EUVD |
EUVD-2015-4128 | Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields. |
Ubuntu USN |
USN-2630-1 | QEMU vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.450% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.