Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15589

Опубликовано: 18 окт. 2017
Источник: nvd
CVSS3: 6.5
CVSS2: 2.1
EPSS Низкий

Описание

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00094
Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

CVSS3: 6.8
redhat
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

CVSS3: 6.5
debian
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

suse-cvrf
больше 8 лет назад

Security update for xen

EPSS

Процентиль: 27%
0.00094
Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200