VDB

DEBIAN-CVE-2015-8552

DEBIAN-CVE-2015-8552 PUBLISHED CVSS 4.400000095367432 MEDIUM

Record from OSV · Published April 13, 2016

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
linuxDebian:124.3.3-3
linuxDebian:134.3.3-3
linuxDebian:144.3.3-3

Risk scores

CVSS 3.0
4.400000095367432
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersions
Debian:12linux0
Debian:13linux0
Debian:14linux0

Timeline

  • Apr 13, 2016 CVE Published
  • Sep 9, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln DEBIAN-CVE-2015-8552
vulnetix vdb fixes DEBIAN-CVE-2015-8552

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2015-8552/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›