VULNERABILITY INTELLIGENCE

CVE-2015-7311

CVSS score3.6 LOW
EPSS probability0.42%
CISA KEVNot currently listed
Published2015-10-01
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:P

Description

libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image.

Primary references