Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x43f-7h79-3278

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.8

Описание

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

EPSS

Процентиль: 28%
0.00099
Низкий

3.8 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 3.8
ubuntu
почти 9 лет назад

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

CVSS3: 2.6
redhat
почти 9 лет назад

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

CVSS3: 3.8
nvd
почти 9 лет назад

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

CVSS3: 3.8
debian
почти 9 лет назад

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges ...

suse-cvrf
почти 9 лет назад

Security update for xen

EPSS

Процентиль: 28%
0.00099
Низкий

3.8 Low

CVSS3

Дефекты

CWE-200