Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2015-8104 Details

Description

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:10 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbdb967af3d54993f5814f1cee0ed311a055377d	CVE	Issue TrackingPatchVendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html	CVE	Mailing ListThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html	CVE	Mailing ListThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html	CVE	Mailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2636.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2645.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0046.html	CVE	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1278496	CVE	Issue TrackingVendor Advisory
https://github.com/torvalds/linux/commit/cbdb967af3d54993f5814f1cee0ed311a055377d	CVE	Issue TrackingPatchVendor Advisory
https://kb.juniper.net/JSA10783	CVE	Third Party Advisory
http://support.citrix.com/article/CTX202583	CVE	Third Party Advisory
http://support.citrix.com/article/CTX203879	CVE	Third Party Advisory
http://www.debian.org/security/2015/dsa-3414	CVE	Third Party Advisory
http://www.debian.org/security/2015/dsa-3426	CVE	Third Party Advisory
http://www.debian.org/security/2016/dsa-3454	CVE	Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/11/10/5	CVE	Mailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/10/4	CVE
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	CVE	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	CVE	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	CVE	Third Party Advisory
http://www.securityfocus.com/bid/77524	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/91787	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1034105	CVE	Third Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/USN-2840-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2841-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2841-2	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2842-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2842-2	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2843-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2843-2	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2844-1	CVE	Third Party Advisory
http://xenbits.xen.org/xsa/advisory-156.html	CVE	PatchVendor Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbdb967af3d54993f5814f1cee0ed311a055377d	[email protected]	Issue TrackingPatchVendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html	[email protected]	Mailing ListThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html	[email protected]	Mailing ListThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html	[email protected]	Mailing ListThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2636.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2645.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0046.html	[email protected]	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1278496	[email protected]	Issue TrackingVendor Advisory
https://github.com/torvalds/linux/commit/cbdb967af3d54993f5814f1cee0ed311a055377d	[email protected]	Issue TrackingPatchVendor Advisory
https://kb.juniper.net/JSA10783	[email protected]	Third Party Advisory
http://support.citrix.com/article/CTX202583	[email protected]	Third Party Advisory
http://support.citrix.com/article/CTX203879	[email protected]	Third Party Advisory
http://www.debian.org/security/2015/dsa-3414	[email protected]	Third Party Advisory
http://www.debian.org/security/2015/dsa-3426	[email protected]	Third Party Advisory
http://www.debian.org/security/2016/dsa-3454	[email protected]	Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/11/10/5	[email protected]	Mailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/10/4	[email protected]
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/77524	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/91787	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1034105	[email protected]	Third Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/USN-2840-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2841-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2841-2	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2842-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2842-2	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2843-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2843-2	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2844-1	[email protected]	Third Party Advisory
http://xenbits.xen.org/xsa/advisory-156.html	[email protected]	PatchVendor Advisory

see all 86 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-399	Resource Management Errors	[email protected]

Affected Products

Product	Versions
xen xen	4.3.0 4.3.1 4.3.2 4.3.3 4.3.4
CPE cpe:2.3:o:xen:xen:4.3.0:::::::* cpe:2.3:o:xen:xen:4.3.1:::::::* cpe:2.3:o:xen:xen:4.3.2:::::::* cpe:2.3:o:xen:xen:4.3.3:::::::* cpe:2.3:o:xen:xen:4.3.4:::::::* cpe:2.3:o:xen:xen:4.4.0:::::::* cpe:2.3:o:xen:xen:4.4.1:::::::* cpe:2.3:o:xen:xen:4.4.2:::::::* cpe:2.3:o:xen:xen:4.4.3:::::::* cpe:2.3:o:xen:xen:4.5.0:::::::* cpe:2.3:o:xen:xen:4.5.1:::::::* cpe:2.3:o:xen:xen:4.5.2:::::::* cpe:2.3:o:xen:xen:4.6.0:::::::* cpe:2.3:o:xen:xen:4.6.1:::::::* cpe:2.3:o:xen:xen:4.6.2:::::::* cpe:2.3:o:xen:xen:4.6.4:::::::* cpe:2.3:o:xen:xen:4.6.5:::::::* Remediation No remediation found in references.
oracle solaris	11.3
CPE cpe:2.3:o:oracle:solaris:11.3:::::::* Remediation No remediation found in references.
oracle vm virtualbox	>= 4.0.0, <= 4.0.34 >= 4.1.0, <= 4.1.42 >= 4.2.0, <= 4.2.34 >= 4.3.0, <= 4.3.35 >= 5.0.0, <= 5.0.13
CPE cpe:2.3:a:oracle:vm_virtualbox:::::::: Remediation No remediation found in references.
linux linux kernel	<= 4.2.3
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.
debian debian linux	7.0 8.0 9.0
CPE cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:8.0:::::::* cpe:2.3:o:debian:debian_linux:9.0:::::::* Remediation No remediation found in references.
canonical ubuntu linux	12.04 14.04 15.04
CPE cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:15.04:::::::* Remediation No remediation found in references.

Change History

24 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
May 6, 2026	Status Change	[email protected]
Apr 23, 2025	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 10, 2023	CVE Modified	[email protected]
Feb 13, 2019	Modified Analysis	[email protected]
May 24, 2017	CVE Modified	[email protected]
Dec 7, 2016	CVE Modified	[email protected]
Dec 6, 2016	CVE Modified	[email protected]
Dec 1, 2016	CVE Modified	[email protected]
Nov 28, 2016	CVE Modified	[email protected]
Oct 15, 2016	CVE Modified	[email protected]
Oct 12, 2016	CVE Modified	[email protected]
Sep 9, 2016	CVE Modified	[email protected]
Aug 30, 2016	Modified Analysis	[email protected]
Aug 9, 2016	CVE Modified	[email protected]
Jul 22, 2016	CVE Modified	[email protected]
Mar 31, 2016	Modified Analysis	[email protected]
Jan 22, 2016	CVE Modified	[email protected]
Jan 12, 2016	CVE Modified	[email protected]
Nov 16, 2015	Modified Analysis	[email protected]
Nov 16, 2015	Initial Analysis	[email protected]

CVE-2015-8104 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO