PT-2012-5383 · Xen+1 · Xen+1

Kurt Seifried · Publicado 2012-11-23 · Atualizado 2024-06-15 · CVE-2012-4411

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.2

Description The graphical console in Xen allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor.

Recommendations For versions 4.0 through 4.2, consider restricting access to the qemu monitor to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-4411

DSA-2543-1

OPENSUSE-SU-2012_1572-1

OPENSUSE-SU-2012_1573-1

OPENSUSE-SU-2024:10196-1

Produtos afetados

Suse

Xen

Referências · 183

• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://bugzilla.novell.com/778105 · Nota
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• http://support.novell.com/security/cve/CVE-2012-3515.html · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-4411 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/09/06/2 · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• http://support.novell.com/security/cve/CVE-2012-3496.html · Nota