CVE-2015-2151
Status: ModifiedHigh (7.2)—
The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.
CVSS
- Version: 2.0
- Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
- Base score: 7.2
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.55%
- Percentile among all scored CVEs: 45
- Score date: 10/19/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (3)
CWEs
- CWE-264
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html
- http://support.citrix.com/article/CTX200484
- http://www.debian.org/security/2015/dsa-3181
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/73015
- http://www.securitytracker.com/id/1031806
- http://www.securitytracker.com/id/1031903
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm
- http://xenbits.xen.org/xsa/advisory-123.html
- https://security.gentoo.org/glsa/201604-03
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html
- http://support.citrix.com/article/CTX200484
- http://www.debian.org/security/2015/dsa-3181
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/73015
- http://www.securitytracker.com/id/1031806
- http://www.securitytracker.com/id/1031903
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm
- http://xenbits.xen.org/xsa/advisory-123.html
- https://security.gentoo.org/glsa/201604-03
Raw JSON (NVD)
Show
{
"id": "CVE-2015-2151",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2015-03-12T14:59:03.837",
"references": [
{
"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761",
"source": "cve@mitre.org"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html",
"source": "cve@mitre.org"
},
{
"url": "http://support.citrix.com/article/CTX200484",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2015/dsa-3181",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/73015",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id/1031806",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id/1031903",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm",
"source": "cve@mitre.org"
},
{
"url": "http://xenbits.xen.org/xsa/advisory-123.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://security.gentoo.org/glsa/201604-03",
"source": "cve@mitre.org"
},
{
"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.citrix.com/article/CTX200484",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2015/dsa-3181",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/73015",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1031806",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1031903",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://xenbits.xen.org/xsa/advisory-123.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security.gentoo.org/glsa/201604-03",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors."
},
{
"lang": "es",
"value": "El emulador x86 en Xen 3.2.x hasta 4.5.x no ignora correctamente las anulaciones de segmentos para instrucciones con operandos del registro, lo que permite a usuarios locales invitados obtener información sensible, causar una denegación de servicio (corrupción de memoria), o posiblemente ejecutar código arbitrario a través de vectores no especificados."
}
],
"lastModified": "2026-06-17T00:23:40.590",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56BDB5A0-0839-4A20-A003-B8CD56F48171"
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "253C303A-E577-4488-93E6-68A8DD942C38"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xen:xen:3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B81B6EEB-D01E-432D-AEBF-707409741C0A"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A4B60DE-A8C0-459E-A99C-6EF0D3264B75"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A83F4F7E-53CF-4066-857B-2154D25979D8"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "048E790E-B0A1-4504-9299-0B6D9CB0C509"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB157D09-B91B-486A-A9F7-C9BA75AE8823"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA95119D-EAF1-48D4-AE7C-0C4927D06CDF"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D40E4E4-3FCB-4980-8DD2-49DDABCB398E"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F7D1B7E-C30F-430F-832D-2A405DA1F2D9"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7C1D0AD-B804-474C-96A3-988BADA0DAD2"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DCD1F05-9F96-40DD-B506-750E87306325"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25B6AE42-E1EB-47A8-8FAF-7A93A67EC67F"
},
{
"criteria": "cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60BADA43-94D5-4E80-B5C8-D01A0249F13E"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "550223A9-B9F1-440A-8C25-9F0F76AF7301"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC734D58-96E5-4DD2-8781-F8E0ADB96462"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62CEC1BF-1922-410D-BCBA-C58199F574C7"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "923F2C2B-4A65-4823-B511-D0FEB7C7FAB2"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1A24DED-B2EC-4D9C-9FA4-DD37EF3E3BFC"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D532B60-C8DD-4A2F-9D05-E574D23EB754"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D83CA8B-8E49-45FA-8FAB-C15052474542"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27537DF5-7E0F-463F-BA87-46E329EE07AC"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EA4F978-9145-4FE6-B4F9-15207E52C40A"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22A995FD-9B7F-4DF0-BECF-4B086E470F1E"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "219597E2-E2D7-4647-8A7C-688B96300158"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65E55950-EACA-4209-B2A1-E09026FC6006"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F0AF8EF-6FF6-4E22-B16E-82C9F90C6B00"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47640819-FC43-49ED-8A77-728C3D7255B3"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2448537F-87AD-45C1-9FB0-7A49CA31BD76"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E36B2265-70E1-413B-A7CF-79D39E9ADCFB"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF948E6A-07BE-4C7D-8A98-002E89D35F4D"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0E23B94-1726-4F63-84BB-8D83FAB156D7"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1044792C-D544-457C-9391-4F3B5BAB978D"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF23B21B-594A-42E2-AF90-D5C4246B39A4"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.4.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A40F356B-4F5F-485D-A53A-8CE4629D6931"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90CCECD0-C0F9-45A8-8699-64428637EBCA"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}