Skip to content
CVE Tracker
Back

CVE-2015-7972

The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x…

Low2.1EPSS 0.43%
Published
Updated
Reserved
Assigned by
mitre

Description

The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to "heavy memory pressure."

Scores

CVSS scores of CVE-2015-7972, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Low2.1AV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS (exploitation in 30 days)
0.43% · top 63% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.1.

Weakness

Affected products

  • n/a

    • affected n/a

References (10)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .