CVE-2015-8554 - CERT CVE
ID CVE-2015-8554
Sažetak Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a "write path."
Reference
CVSS
Base: 6.6
Impact: 10.0
Exploitability:2.7
Pristup
VektorSloženostAutentikacija
LOCAL MEDIUM SINGLE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE COMPLETE
CVSS vektor AV:L/AC:M/Au:S/C:C/I:C/A:C
Zadnje važnije ažuriranje 01-07-2017 - 01:29
Objavljeno 14-04-2016 - 14:59