Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2015-2150 Details

Description

Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=af6fc858a35b90e89ea7a7ee58e66628c55c776b	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=1196266	CVE
https://github.com/torvalds/linux/commit/af6fc858a35b90e89ea7a7ee58e66628c55c776b	CVE
https://seclists.org/bugtraq/2019/Aug/18	CVE
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm	CVE
http://www.debian.org/security/2015/dsa-3237	CVE
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	CVE
http://www.securityfocus.com/bid/73014	CVE
http://www.securitytracker.com/id/1031806	CVE
http://www.securitytracker.com/id/1031902	CVE
http://www.ubuntu.com/usn/USN-2631-1	CVE
http://www.ubuntu.com/usn/USN-2632-1	CVE
http://xenbits.xen.org/xsa/advisory-120.html	CVE	Vendor Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=af6fc858a35b90e89ea7a7ee58e66628c55c776b	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=1196266	[email protected]
https://github.com/torvalds/linux/commit/af6fc858a35b90e89ea7a7ee58e66628c55c776b	[email protected]
https://seclists.org/bugtraq/2019/Aug/18	[email protected]
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm	[email protected]
http://www.debian.org/security/2015/dsa-3237	[email protected]
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	[email protected]
http://www.securityfocus.com/bid/73014	[email protected]
http://www.securitytracker.com/id/1031806	[email protected]
http://www.securitytracker.com/id/1031902	[email protected]
http://www.ubuntu.com/usn/USN-2631-1	[email protected]
http://www.ubuntu.com/usn/USN-2632-1	[email protected]
http://xenbits.xen.org/xsa/advisory-120.html	[email protected]	Vendor Advisory

see all 42 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-264	Permissions, Privileges, and Access Controls	[email protected]

Affected Products

Product	Versions
ubuntu ubuntu	12.04
CPE cpe:2.3:o:ubuntu:ubuntu:12.04::lts::::: Remediation No remediation found in references.
xen xen	3.3.0 3.3.1 3.3.2 3.4.0 3.4.1
CPE cpe:2.3:o:xen:xen:3.3.0:::::::* cpe:2.3:o:xen:xen:3.3.1:::::::* cpe:2.3:o:xen:xen:3.3.2:::::::* cpe:2.3:o:xen:xen:3.4.0:::::::* cpe:2.3:o:xen:xen:3.4.1:::::::* cpe:2.3:o:xen:xen:3.4.2:::::::* cpe:2.3:o:xen:xen:3.4.3:::::::* cpe:2.3:o:xen:xen:3.4.4:::::::* cpe:2.3:o:xen:xen:4.0.0:::::::* cpe:2.3:o:xen:xen:4.0.1:::::::* cpe:2.3:o:xen:xen:4.0.2:::::::* cpe:2.3:o:xen:xen:4.0.3:::::::* cpe:2.3:o:xen:xen:4.0.4:::::::* cpe:2.3:o:xen:xen:4.1.0:::::::* cpe:2.3:o:xen:xen:4.1.1:::::::* cpe:2.3:o:xen:xen:4.1.2:::::::* cpe:2.3:o:xen:xen:4.1.3:::::::* cpe:2.3:o:xen:xen:4.1.4:::::::* cpe:2.3:o:xen:xen:4.1.5:::::::* cpe:2.3:o:xen:xen:4.1.6.1:::::::* cpe:2.3:o:xen:xen:4.2.0:::::::* cpe:2.3:o:xen:xen:4.2.1:::::::* cpe:2.3:o:xen:xen:4.2.2:::::::* cpe:2.3:o:xen:xen:4.2.3:::::::* cpe:2.3:o:xen:xen:4.3.0:::::::* cpe:2.3:o:xen:xen:4.3.1:::::::* cpe:2.3:o:xen:xen:4.4.0:::::::* cpe:2.3:o:xen:xen:4.4.0:rc1:::::: cpe:2.3:o:xen:xen:4.4.1:-:::::: cpe:2.3:o:xen:xen:4.5.0:::::::* Remediation No remediation found in references.
linux linux kernel	<= 3.19.1
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

25 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 6, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Aug 13, 2019	CVE Modified	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Jan 3, 2017	CVE Modified	[email protected]
Dec 8, 2016	CVE Modified	[email protected]
Nov 30, 2016	CVE Modified	[email protected]
Oct 12, 2016	CVE Modified	[email protected]
Jul 8, 2016	Modified Analysis	[email protected]
Jun 17, 2016	CVE Modified	[email protected]
Jun 16, 2016	CVE Translated	[email protected]
Jun 16, 2016	CVE Modified	[email protected]
Jun 15, 2016	CVE Translated	[email protected]
Jun 15, 2016	CVE Modified	[email protected]
Jun 4, 2015	CVE Modified	[email protected]
Apr 10, 2015	CVE Modified	[email protected]
Mar 26, 2015	CVE Modified	[email protected]
Mar 25, 2015	CVE Modified	[email protected]
Mar 18, 2015	CVE Modified	[email protected]
Mar 17, 2015	CVE Modified	[email protected]
Mar 12, 2015	Modified Analysis	[email protected]
Mar 12, 2015	Initial Analysis	[email protected]

CVE-2015-2150 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO