Candidate: CVE-2015-7969 PublicDate: 2015-10-30 15:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7969 http://xenbits.xen.org/xsa/advisory-149.html http://xenbits.xen.org/xsa/advisory-151.html Description: Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Ian Campbell Assigned-to: CVSS: Patches_xen: Tags_xen: universe-binary upstream_xen: needs-triage precise_xen: released (4.1.6.1-0ubuntu0.12.04.7) trusty_xen: released (4.4.2-0ubuntu0.14.04.3) trusty/esm_xen: DNE (trusty was released [4.4.2-0ubuntu0.14.04.3]) vivid_xen: released (4.5.0-1ubuntu4.3) wily_xen: released (4.5.1-0ubuntu1.1) devel_xen: released (4.5.1-0ubuntu2)