CVE-2015-2877

Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection (CAIN) attack. NOTE: the vendor states "Basically if you care about this attack vector, disable deduplication." Share-until-written approaches for memory conservation among mutually untrusting tenants are inherently detectable for information disclosure, and can be classified as potentially misunderstood behaviors rather than vulnerabilities

• CWE-200

• http://www.antoniobarresi.com/files/cain_advisory.txtTechnical Description, Third Party Advisory
• http://www.kb.cert.org/vuls/id/935424Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/76256Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1252096Issue Tracking, Third Party Advisory
• https://www.kb.cert.org/vuls/id/BGAR-A2CNKGThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/BLUU-9ZAHZHThird Party Advisory, US Government Resource
• https://www.usenix.org/system/files/conference/woot15/woot15-paper-barresi.pdfTechnical Description, Third Party Advisory
• http://www.antoniobarresi.com/files/cain_advisory.txtTechnical Description, Third Party Advisory
• http://www.kb.cert.org/vuls/id/935424Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/76256Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1252096Issue Tracking, Third Party Advisory
• https://www.kb.cert.org/vuls/id/BGAR-A2CNKGThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/BLUU-9ZAHZHThird Party Advisory, US Government Resource
• https://www.usenix.org/system/files/conference/woot15/woot15-paper-barresi.pdfTechnical Description, Third Party Advisory

Published

Mar 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2871Chiyu BF-660C fingerprint access-control devices allow remot…
• CVE-2015-2872Multiple cross-site scripting (XSS) vulnerabilities in Trend…
• CVE-2015-2873Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery…
• CVE-2015-2874Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, S…
• CVE-2015-2875Absolute path traversal vulnerability on Seagate GoFlex Sate…
• CVE-2015-2876Unrestricted file upload vulnerability on Seagate GoFlex Sat…
• CVE-2015-2878Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-2880TRENDnet WiFi Baby Cam TV-IP743SIC has a password of admin f…
• CVE-2015-2881Gynoii has a password of guest for the backdoor guest accoun…
• CVE-2015-2882Philips In.Sight B120/37 has a password of b120root for the …
• CVE-2015-2883Philips In.Sight B120/37 has XSS, related to the Weaved clou…
• CVE-2015-2884Philips In.Sight B120/37 allows remote attackers to obtain s…