CVE-2015-1563

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-09 · updated 2026-06-17
Weakness: CWE-399

Description

The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number messages to be logged.

Affected products

Fedoraproject Fedora: 21
xen: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1.0 (+16)

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html
http://www.openwall.com/lists/oss-security/2015/01/29/9
http://www.securityfocus.com/bid/72766
http://www.securitytracker.com/id/1031663
http://xenbits.xen.org/xsa/advisory-118.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html
http://www.openwall.com/lists/oss-security/2015/01/29/9
http://www.securityfocus.com/bid/72766
http://www.securitytracker.com/id/1031663
http://xenbits.xen.org/xsa/advisory-118.html

Get alerted when CVE-2015-1563 or the next vulnerability affects your stack