CVE-2015-0268

EPSS 0.05%
Veröffentlicht 16.02.2015 15:59:03
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to cause a denial of service (host crash) by writing an invalid value to the GICD.SGIR register.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Xen ≫ Xen Version4.5.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.126

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/72591

http://www.securitytracker.com/id/1031746

http://xenbits.xen.org/xsa/advisory-117.html

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/100868

https://nvd.nist.gov/vuln/detail/CVE-2015-0268

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0268

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0268

EUVD