Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-15589

Опубликовано: 12 окт. 2017
Источник: redhat
CVSS3: 6.8
EPSS Низкий

Описание

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5xenWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1499819xen: hypervisor stack leak in x86 I/O intercept code (XSA-239)

EPSS

Процентиль: 27%
0.00094
Низкий

6.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

CVSS3: 6.5
nvd
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

CVSS3: 6.5
debian
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

suse-cvrf
больше 8 лет назад

Security update for xen

EPSS

Процентиль: 27%
0.00094
Низкий

6.8 Medium

CVSS3