CVE-2015-2152

Severity

19%

Complexity

34%

Confidentiality

48%

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.

CVSS 2.0 Base Score 1.9. CVSS Attack Vector: local. CVSS Attack Complexity: medium. CVSS Vector: (AV:L/AC:M/Au:N/C:N/I:P/A:N).

Overview

First reported 9 years ago

2015-03-18 16:59:00

Last updated 6 years ago

2018-10-30 16:26:00

Affected Software

Xen

Fedora 20

20

Fedora 21

21

Fedora 22

22

References

FEDORA-2015-3935

Third Party Advisory

FEDORA-2015-3721

Third Party Advisory

FEDORA-2015-3944

Third Party Advisory

openSUSE-SU-2015:0732

73068

1031806

Third Party Advisory, VDB Entry

1031919

Third Party Advisory, VDB Entry

http://xenbits.xen.org/xsa/advisory-119.html

Patch, Vendor Advisory

GLSA-201504-04

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.