Out-of-bounds Write The advisory has been revoked - it doesn't affect any version of package xen (opens in a new tab)

Threat Intelligence

0.64% (46^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-UBUNTU1510-XEN-624990
published16 Oct 2017
disclosed16 Oct 2017

Report a new vulnerability Found a mistake?

Introduced: 16 Oct 2017

CVE-2015-7504 (opens in a new tab) CWE-787 (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:15.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream xen package and not the xen package as distributed by Ubuntu.

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.