PT-2013-3138 · Xen+1 · Xen+1

Jan Beulich · Publicado 2013-09-30 · Atualizado 2024-06-15 · CVE-2013-1442

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.3.x

Description The issue allows local guest OSes to obtain sensitive information by reading registers due to improper clearing of previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, specifically on AVX or LWP capable CPUs.

Recommendations For Xen versions 4.0 through 4.3.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-1442

DSA-3006-1

OPENSUSE-SU-2024:10196-1

Produtos afetados

Suse

Xen

Referências · 135

• https://suse.com/security/cve/CVE-2014-3124 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• https://suse.com/security/cve/CVE-2012-4411 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://suse.com/security/cve/CVE-2013-0153 · Nota
• https://suse.com/security/cve/CVE-2014-5149 · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• https://suse.com/security/cve/CVE-2012-5513 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-1442 · Aviso do Fabricante