Xen CVE-2015-4106 Local Security Bypass Vulnerability

Bugtraq ID:	74949
Class:	Design Error
CVE:	CVE-2015-4106
Remote:	No
Local:	Yes
Published:	Jun 02 2015 12:00AM
Updated:	Jul 29 2016 08:00PM
Credit:	Jan Beulich of SUSE.
Vulnerable:	Xen Xen 4.0.4 Xen Xen 4.0.1 Xen Xen 4.5.0 Xen Xen 4.4.1 Xen Xen 4.4.0 Xen Xen 4.4 Xen Xen 4.3.1 Xen Xen 4.3.0 Xen Xen 4.3 Xen Xen 4.2.3 Xen Xen 4.2.2 Xen Xen 4.2.1 Xen Xen 4.2.0 Xen Xen 4.2 Xen Xen 4.1.6.1 Xen Xen 4.1.5 Xen Xen 4.1.4 Xen Xen 4.1.3 Xen Xen 4.1.2 Xen Xen 4.1.1 Xen Xen 4.1.0 Xen Xen 4.1 Xen Xen 4.0.3 Xen Xen 4.0.2 Xen Xen 4.0.0 Xen Xen 4.0 Xen Xen 3.4.4 Xen Xen 3.4.3 Xen Xen 3.4.2 Xen Xen 3.4.1 Xen Xen 3.4.0 Xen Xen 3.3.2 Xen Xen 3.3.1 Xen Xen 3.3.0 Xen Xen 3.3 Ubuntu Ubuntu Linux 15.04 Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP3 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP1 LTSS + Linux kernel 2.6.5 + Linux kernel 2.6.5 SuSE Linux Enterprise Server 11 SP2 LTSS SuSE Linux Enterprise Desktop 11 SP3 S.u.S.E. openSUSE 13.2 S.u.S.E. openSUSE 13.1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler SDX 10.5e Citrix NetScaler SDX 10.5 Citrix NetScaler SDX 10.1 Citrix NetScaler Gateway 10.5.e Citrix NetScaler Gateway 10.5 Citrix NetScaler Gateway 10.1 Citrix NetScaler ADC 10.5.e Citrix NetScaler ADC 10.5 Citrix NetScaler ADC 10.1
Not Vulnerable:	Citrix NetScaler SDX 10.5 Build 58.11 Citrix NetScaler SDX 10.5 Build 57.7005.e Citrix NetScaler SDX 10.1 Build 133.9 Citrix NetScaler Gateway 10.5.e Build 57.7005 Citrix NetScaler Gateway 10.5 Build 58.11 Citrix NetScaler Gateway 10.1 Build 133.9 Citrix NetScaler ADC 10.5.e Build 57.7005 Citrix NetScaler ADC 10.5 Build 58.11 Citrix NetScaler ADC 10.1 Build 133.9

Xen CVE-2015-4106 Local Security Bypass Vulnerability

Xen is prone to a local security-bypass vulnerability.

Attackers with access to a guest operating system can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

Xen CVE-2015-4106 Local Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen CVE-2015-4106 Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Xen CVE-2015-4106 Local Security Bypass Vulnerability

References:

• Unmediated PCI register access in qemu (Xen)
  
• Xen HomePage (Xen)
  
• CTX206006: Citrix NetScaler Service Delivery Appliance Multiple Security Updates (Citrix)
  
• XSA-131 : Unmediated PCI register access in qemu (Xen)