SB2015020902 - Resource management error in Xen



SB2015020902 - Resource management error in Xen

Published: February 9, 2015 Updated: July 28, 2020

Security Bulletin ID SB2015020902
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Resource management error (CVE-ID: CVE-2015-1563)

The vulnerability allows a local non-authenticated attacker to perform service disruption.

The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number messages to be logged.


Remediation

Install update from vendor's website.