cve/2015/CVE-2015-4164.md

CVE-2015-4164

Description

The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercall_iret call with EFLAGS.VM set.

POC

Reference

No PoCs from references.

Github

• https://github.com/pigram86/cookbook-xs-maintenance