Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15589

Опубликовано: 18 окт. 2017
Источник: nvd
CVSS3: 6.5
CVSS2: 2.1
EPSS Низкий

Описание

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.0041
Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 9 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

CVSS3: 6.8
redhat
почти 9 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

CVSS3: 6.5
debian
почти 9 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS ...

CVSS3: 6.5
github
больше 4 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

suse-cvrf
почти 9 лет назад

Security update for xen

EPSS

Процентиль: 35%
0.0041
Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200