CVE-2015-8341

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.x through 4.6.x

Description The issue is related to the libxl toolstack library in Xen, which does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process. This allows attackers to cause a denial of service by consuming memory and disk space through starting domains.

Recommendations For Xen versions 4.1.x through 4.6.x, consider restricting the management of multiple domains in the same process to minimize the risk of exploitation. As a temporary workaround, consider limiting the number of domains that can be started in the same process until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.