Xen CVE-2015-4105 Local Denial of Service Vulnerability

Bugtraq ID:	74948
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-4105
Remote:	No
Local:	Yes
Published:	Jun 02 2015 12:00AM
Updated:	Jul 29 2016 08:00PM
Credit:	Jan Beulich of SUSE
Vulnerable:	Xen Xen 4.0.4 Xen Xen 4.0.1 Xen Xen 4.5.0 Xen Xen 4.4.1 Xen Xen 4.4.0 Xen Xen 4.4 Xen Xen 4.3.1 Xen Xen 4.3.0 Xen Xen 4.3 Xen Xen 4.2.3 Xen Xen 4.2.2 Xen Xen 4.2.1 Xen Xen 4.2.0 Xen Xen 4.2 Xen Xen 4.1.6.1 Xen Xen 4.1.5 Xen Xen 4.1.4 Xen Xen 4.1.3 Xen Xen 4.1.2 Xen Xen 4.1.1 Xen Xen 4.1.0 Xen Xen 4.1 Xen Xen 4.0.3 Xen Xen 4.0.2 Xen Xen 4.0.0 Xen Xen 4.0 Xen Xen 3.4.4 Xen Xen 3.4.3 Xen Xen 3.4.2 Xen Xen 3.4.1 Xen Xen 3.4.0 Xen Xen 3.3.2 Xen Xen 3.3.1 Xen Xen 3.3.0 Xen Xen 3.3 Ubuntu Ubuntu Linux 15.04 Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP3 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP1 LTSS + Linux kernel 2.6.5 + Linux kernel 2.6.5 SuSE Linux Enterprise Server 11 SP2 LTSS SuSE Linux Enterprise Desktop 11 SP3 S.u.S.E. openSUSE 13.2 S.u.S.E. openSUSE 13.1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler SDX 10.5e Citrix NetScaler SDX 10.5 Citrix NetScaler SDX 10.1 Citrix NetScaler Gateway 10.5.e Citrix NetScaler Gateway 10.5 Citrix NetScaler Gateway 10.1 Citrix NetScaler ADC 10.5.e Citrix NetScaler ADC 10.5 Citrix NetScaler ADC 10.1
Not Vulnerable:	Citrix NetScaler SDX 10.5 Build 58.11 Citrix NetScaler SDX 10.5 Build 57.7005.e Citrix NetScaler SDX 10.1 Build 133.9 Citrix NetScaler Gateway 10.5.e Build 57.7005 Citrix NetScaler Gateway 10.5 Build 58.11 Citrix NetScaler Gateway 10.1 Build 133.9 Citrix NetScaler ADC 10.5.e Build 57.7005 Citrix NetScaler ADC 10.5 Build 58.11 Citrix NetScaler ADC 10.1 Build 133.9

Xen CVE-2015-4105 Local Denial of Service Vulnerability

Xen is prone to a local denial-of-service vulnerability.

A local attacker can exploit this issue to cause a denial-of-service condition, denying service to legitimate users.

Xen CVE-2015-4105 Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen CVE-2015-4105 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Xen CVE-2015-4105 Local Denial of Service Vulnerability

References:

• Xen Homepage (XenSource )
  
• CTX206006: Citrix NetScaler Service Delivery Appliance Multiple Security Updates (Citrix)
  
• Xen Security Advisory 130 (CVE-2015-4105) - Guest triggerable qemu MSI-X pass-th (Xen)