PT-2020-12818
CVE-2020-11740
·
تاريخ النشر
2020-04-14
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Xen versions through 4.13.x
Description
An issue in xenoprof allows guest OS users without active profiling to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.
Recommendations
For Xen versions through 4.13.x, consider disabling the xenoprof feature until a patch is available to prevent unprivileged guests from mapping xenoprof buffers and obtaining sensitive information about other guests.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾