PT-2015-5566 · Xen+1 · Xen+1
CVSS v2.0
2.1
منخفضة
| المتجه | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Xen versions 3.2.x through 4.5.x
Description
The issue allows local guest users to obtain sensitive information due to improper initialization of data structures by the HYPERVISOR xen version hypercall.
Recommendations
For versions 3.2.x through 4.5.x, update to a version that properly initializes data structures for the HYPERVISOR xen version hypercall to prevent sensitive information disclosure.
استغلال
إصلاح
Information Disclosure
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Suse
Xen