CVE-2015-8340

CVE-2015-8340 is a medium-severity vulnerability in Xen with a CVSS 2.0 base score of 4.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-17.

Key facts

• Severity: Medium (CVSS 2.0 base score 4.7)
• EPSS exploit prediction: 0% (30th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-17
• Affected product: Xen
• Published: 2015-12-17
• Last modified: 2026-06-17

Description

The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.

Frequently asked questions

What is CVE-2015-8340?

The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.

How severe is CVE-2015-8340?

CVE-2015-8340 has a CVSS 2.0 base score of 4.7, rated medium severity.

Is CVE-2015-8340 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (30th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-8340?

CVE-2015-8340 primarily affects Xen. In total, 44 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2015-8340?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2015-8340 published?

CVE-2015-8340 was published on 2015-12-17 and last updated on 2026-06-17.

References

• http://support.citrix.com/article/CTX203451
• http://www.debian.org/security/2016/dsa-3519
• http://www.securityfocus.com/bid/79038
• http://www.securitytracker.com/id/1034391
• http://xenbits.xen.org/xsa/advisory-159.html
• https://security.gentoo.org/glsa/201604-03

Affected products (44)

• cpe:2.3:o:xen:xen:3.2.0:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.2.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.2.2:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.2.3:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.3.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.3.2:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.1.6:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.2.4:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.2.5:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*
• cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*

More vulnerabilities in Xen

• CVE-2017-10921 — Critical (CVSS 10.0): The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and…
• CVE-2017-10920 — Critical (CVSS 10.0): The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed…
• CVE-2017-10918 — Critical (CVSS 10.0): Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to…
• CVE-2017-10912 — Critical (CVSS 10.0): Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka…
• CVE-2015-8104 — Critical (CVSS 10.0): The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a…
• CVE-2018-12892 — Critical (CVSS 9.9): An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI…

All CVEs affecting Xen →

Other CWE-17 vulnerabilities

• CVE-2015-5887 — Critical (CVSS 10.0): The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request…
• CVE-2015-2738 — Critical (CVSS 10.0): The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before…
• CVE-2015-2737 — Critical (CVSS 10.0): The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR…
• CVE-2015-2734 — Critical (CVSS 10.0): The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0,…
• CVE-2015-4335 — Critical (CVSS 10.0): Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.
• CVE-2015-3292 — Critical (CVSS 10.0): The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging…

Browse all CWE-17 vulnerabilities →