CVE-2015-8550

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.

• CWE-284

• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3434
• http://www.debian.org/security/2016/dsa-3471
• http://www.debian.org/security/2016/dsa-3519
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
• http://www.securityfocus.com/bid/79592Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034479Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-155.htmlVendor Advisory
• https://security.gentoo.org/glsa/201604-03
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3434
• http://www.debian.org/security/2016/dsa-3471
• http://www.debian.org/security/2016/dsa-3519
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
• http://www.securityfocus.com/bid/79592Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034479Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-155.htmlVendor Advisory
• https://security.gentoo.org/glsa/201604-03

Published

Apr 14, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8543The networking implementation in the Linux kernel through 4.…7
• CVE-2015-8544NetApp SnapDrive for Windows before 7.0.2P4, 7.0.3, and 7.1 …
• CVE-2015-8546An issue was discovered on Samsung mobile devices with softw…9.8
• CVE-2015-8547The CoreUserInputHandler::doMode function in core/coreuserin…
• CVE-2015-8548Multiple unspecified vulnerabilities in Google V8 before 4.7…
• CVE-2015-8549XML external entity (XXE) vulnerability in PyAMF before 0.8.…7.1
• CVE-2015-8551The PCI backend driver in Xen, when running on an x86 system…6
• CVE-2015-8552The PCI backend driver in Xen, when running on an x86 system…
• CVE-2015-8553Xen allows guest OS users to obtain sensitive information fr…6.5
• CVE-2015-8554Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, whe…
• CVE-2015-8555Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initializ…
• CVE-2015-8556Local privilege escalation vulnerability in the Gentoo QEMU …