CVE-2015-2151

High

Published: 12/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The x86 emulator in Xen versions 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands. This allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code.

Risk Assessment

The organization may be exposed to sensitive data leaks and attacks that could lead to denial of service or remote code execution.

Recommendation

It is recommended to upgrade to the latest version of Xen to mitigate this vulnerability and to monitor systems for potential abuse.

Other vulnerabilities in Xen x86 emulator

CVE-2016-9386High
The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving 'unexpected' base/limit values.

Original NVD description (English source)

The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.