CVE-2015-8341
Fixed in a distro release EPSS 2%
The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.8.0~rc3-1 |
| Debian 13 | xen | 4.8.0~rc3-1 |
| Debian 14 | xen | 4.8.0~rc3-1 |
| Debian 8 | xen | 4.4.1-9+deb8u4 |
| SUSE Linux Enterprise Desktop 11 SP3 | xen | 4.2.5_18-21.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | xen | 4.4.3_06-29.1 |
| SUSE Linux Enterprise Desktop 12 | xen | 4.4.3_06-22.15.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | xen | 4.5.2_02-4.1 |
| SUSE Linux Enterprise Server 11 SP3 | xen | 4.2.5_18-21.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | xen | 4.2.5_18-21.1 |
| SUSE Linux Enterprise Server 11 SP4 | xen | 4.4.3_06-29.1 |
| SUSE Linux Enterprise Server 12 | xen | 4.4.3_06-22.15.1 |
| SUSE Linux Enterprise Server 12 SP1 | xen | 4.5.2_02-4.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | xen | 4.2.5_18-21.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | xen | 4.4.3_06-29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | xen | 4.4.3_06-22.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | xen | 4.5.2_02-4.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | xen | 4.2.5_18-21.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | xen | 4.4.3_06-29.1 |
| SUSE Linux Enterprise Software Development Kit 12 | xen | 4.4.3_06-22.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | xen | 4.5.2_02-4.1 |
| Ubuntu 14.04 LTS | xen | 4.4.2-0ubuntu0.14.04.4 |
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 |