Login Request a demo
Unscored severity · published Mar 18, 2015
CVE-2015-2152
Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FE
Fedora · Fedoraproject
20; 21; 22 · source: NVD
XE
Xen · Xen
through 4.5.0 · source: NVD
Affected product
FE
Fedora
Fedoraproject
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2152
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2152
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html
www.securityfocus.com
http://www.securityfocus.com/bid/73068
Third Party Advisory
http://www.securitytracker.com/id/1031806
More from Fedora
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2024-4577
Argument Injection in PHP-CGI
9.8
CVE-2021-44026
Roundcube Webmail SQL Injection Vulnerability
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)