VYPR
High severity7.5NVD Advisory· Published Apr 14, 2016· Updated May 6, 2026

CVE-2015-8554

CVE-2015-8554

Description

Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a "write path."

Affected products

1
  • cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*
    Range: <=4.6.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.