Xen CVE-2015-2756 Denial of Service Vulnerability

Bugtraq ID:	72577
Class:	Boundary Condition Error
CVE:	CVE-2015-2756
Remote:	Yes
Local:	No
Published:	Mar 31 2015 12:00AM
Updated:	Jul 29 2016 08:00PM
Credit:	Jan Beulich of SUSE
Vulnerable:	Xen Xen 4.0.4 Xen Xen 4.0.1 Xen Xen 4.5.0 Xen Xen 4.4.1 Xen Xen 4.4.0 Xen Xen 4.4 Xen Xen 4.3.1 Xen Xen 4.3.0 Xen Xen 4.3 Xen Xen 4.2.3 Xen Xen 4.2.2 Xen Xen 4.2.1 Xen Xen 4.2.0 Xen Xen 4.2 Xen Xen 4.1.6.1 Xen Xen 4.1.5 Xen Xen 4.1.4 Xen Xen 4.1.3 Xen Xen 4.1.2 Xen Xen 4.1.1 Xen Xen 4.1.0 Xen Xen 4.1 Xen Xen 4.0.3 Xen Xen 4.0.2 Xen Xen 4.0.0 Xen Xen 4.0 Xen Xen 3.4.4 Xen Xen 3.4.3 Xen Xen 3.4.2 Xen Xen 3.4.1 Xen Xen 3.4.0 Xen Xen 3.3.2 Xen Xen 3.3.1 Xen Xen 3.3.0 Xen Xen 3.3 Ubuntu Ubuntu Linux 15.04 Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 S.u.S.E. openSUSE 13.2 S.u.S.E. openSUSE 13.1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler SDX 10.5e Citrix NetScaler SDX 10.5 Citrix NetScaler SDX 10.1 Citrix NetScaler Gateway 10.5.e Citrix NetScaler Gateway 10.5 Citrix NetScaler Gateway 10.1 Citrix NetScaler ADC 10.5.e Citrix NetScaler ADC 10.5 Citrix NetScaler ADC 10.1
Not Vulnerable:	Citrix NetScaler SDX 10.5 Build 58.11 Citrix NetScaler SDX 10.5 Build 57.7005.e Citrix NetScaler SDX 10.1 Build 133.9 Citrix NetScaler Gateway 10.5.e Build 57.7005 Citrix NetScaler Gateway 10.5 Build 58.11 Citrix NetScaler Gateway 10.1 Build 133.9 Citrix NetScaler ADC 10.5.e Build 57.7005 Citrix NetScaler ADC 10.5 Build 58.11 Citrix NetScaler ADC 10.1 Build 133.9

Xen CVE-2015-2756 Denial of Service Vulnerability

Xen is prone to a denial-of-service vulnerability.

Attackers with access to a guest HVM operating system can exploit this issue to cause a denial of service condition.

Xen CVE-2015-2756 Denial of Service Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen CVE-2015-2756 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Xen CVE-2015-2756 Denial of Service Vulnerability

References:

• Xen Homepage (XenSource )
  
• CTX206006: Citrix NetScaler Service Delivery Appliance Multiple Security Updates (Citrix)
  
• Xen Security Advisory 126 (CVE-2015-2756) - Unmediated PCI command register acce (Seclists.org)