CVE-2015-0268

EPSS 0.05%
Published 16.02.2015 15:59:03
Last modified 12.04.2025 10:46:40
Source secalert@redhat.com
Teams watchlist Login
Open Login

The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to cause a denial of service (host crash) by writing an invalid value to the GICD.SGIR register.

Affected products Warnungen 0 Metrics 2 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Xen ≫ Xen Version4.5.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.126

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/72591

http://www.securitytracker.com/id/1031746

http://xenbits.xen.org/xsa/advisory-117.html

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/100868

https://nvd.nist.gov/vuln/detail/CVE-2015-0268

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0268

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0268

EUVD