Vulnetix
Try Vulnetix Request Demo
CVE-2015-2152 PUBLISHED

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.

EPSS 0.08% · 22.6th percentile

Risk Scores

EPSS Score
0.08%
22.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSxen0, 4.3.0-1ubuntu1, 4.3.0-1ubuntu2

Timeline

References

Open in Interactive Console →