SB2015031110 - Fedora 22 update for xen
Published: March 11, 2015 Updated: April 24, 2025
Security Bulletin ID
SB2015031110
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2015-2151)
The vulnerability allows a local non-authenticated attacker to execute arbitrary code.
The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.
Remediation
Install update from vendor's website.