CVE-2015-8550

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.

Affected products

Suse, Ubuntu, Xen

Xen

All versions

CVSS 3.0

8.2 HIGH

EPSS

1.1% (63th percentile)

Weakness

CWE-284

NVD status

Modified

Published

2016-04-14