VDB

DEBIAN-CVE-2015-8552

DEBIAN-CVE-2015-8552 PUBLISHED CVSS 4.400000095367432 MEDIUM

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."

Risk Scores

CVSS v3.0
4.400000095367432
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:12linux0, 0, 0
Debian:13linux0, 0, 0
Debian:14linux0, 0, 0
Debian:11linux0, 0, 0

Timeline

  • Apr 13, 2016 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›