Security Advisory

CVE-2015-4164

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-06-15 15:00:00
Last updated 2024-08-06 06:04:02
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercall_iret call with EFLAGS.VM set.