Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-2151

Fixed in a distro release EPSS <1%

The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.

Published 2015-03-12 · CVE record · OSV

Products: fedoraproject fedora, debian_linux, xen

Distro releases

ReleasePackageFixed in
Debian 12xen4.4.1-8
Debian 13xen4.4.1-8
Debian 14xen4.4.1-8
Debian 7xen4.1.4-3+deb7u5
Red Hat Enterprise Linux 5kernel0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-PAE0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-PAE-debuginfo0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-PAE-devel0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-debug0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-debug-debuginfo0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-debug-devel0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-debuginfo0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-debuginfo-common0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-devel0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-doc0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-headers0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-kdump0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-kdump-debuginfo0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-kdump-devel0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-xen0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-xen-debuginfo0:2.6.18-409.el5
Red Hat Enterprise Linux 5kernel-xen-devel0:2.6.18-409.el5
SUSE Linux Enterprise Desktop 12xen4.4.1_10-9.1
SUSE Linux Enterprise Server 12xen4.4.1_10-9.1
SUSE Linux Enterprise Server for SAP Applications 12xen4.4.1_10-9.1
SUSE Linux Enterprise Software Development Kit 12xen4.4.1_10-9.1
Ubuntu 14.04 LTSxen4.4.1-0ubuntu0.14.04.4