PT-2015-5565 · Xen+1 · Xen+1

Jan Beulich · Publicado 2015-03-09 · Atualizado 2018-10-30 · CVE-2015-2044

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 3.2.x through 4.5.x

Description The issue concerns the emulation routines for unspecified X86 devices in Xen, which do not properly initialize data. This allows local HVM guest users to obtain sensitive information via vectors involving an unsupported access size.

Recommendations For Xen versions 3.2.x through 4.5.x, update to a version that properly initializes data in the emulation routines for X86 devices to prevent local HVM guest users from obtaining sensitive information.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-2044

DSA-3181-1

MGASA-2016-0098

OPENSUSE-SU-2015_0732-1

OPENSUSE-SU-2015_1092-1

SUSE-SU-2015:0613-1

SUSE-SU-2015:0745-1

SUSE-SU-2015:0746-1

SUSE-SU-2015:0747-1

SUSE-SU-2015_0745-1

SUSE-SU-2015_0746-1

SUSE-SU-2015_0747-1

Produtos afetados

Suse

Xen

Referências · 159

• 🔥 https://github.com/vincentbernat/cve-2015-3456 · Exploit
• https://ubuntu.com/security/CVE-2015-2044 · Aviso do Fabricante
• https://bugzilla.suse.com/912011 · Nota
• http://xenbits.xen.org/xsa/advisory-118.html · Nota
• https://bugzilla.suse.com/921842 · Nota
• http://xenbits.xen.org/xsa/advisory-164.html · Nota
• https://osv.dev/vulnerability/MGASA-2016-0098 · Aviso do Fabricante
• http://xenbits.xen.org/xsa/advisory-120.html · Nota
• https://suse.com/security/cve/CVE-2015-4164.html · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://suse.com/security/cve/CVE-2015-2751.html · Nota
• https://security.gentoo.org/glsa/201504-04 · Aviso do Fabricante
• https://bugzilla.suse.com/903680 · Nota
• http://xenbits.xen.org/xsa/advisory-124.html · Nota
• http://xenbits.xen.org/xsa/advisory-146.html · Nota