PT-2013-4976

CVE-2013-4368

Publicado

2013-10-17

Atualizado

2017-08-29

Descrição por

CVSS 2.0

1.9

Baixa

MétricasAV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 3.1.x through 4.3.x

Description The issue allows local 64-bit PV guests to obtain sensitive information, specifically hypervisor stack content, via unspecified vectors related to stale data in a segment register. This occurs when using FS: or GS: segment override in the outs instruction emulation.

Recommendations For Xen versions 3.1.x through 4.3.x, at the moment, there is no information about a newer version that contains a fix for this issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Identificadores relacionados

CVE-2013-4368

DSA-3006-1

RHSA-2013:1449