Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2013-4368

Опубликовано: 17 окт. 2013
Источник: ubuntu
Приоритет: low
CVSS2: 1.9

Описание

The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive information (hypervisor stack content) via unspecified vectors related to stale data in a segment register.

РелизСтатусПримечание
devel

released

4.3.0-1ubuntu2
lucid

DNE

precise

released

4.1.5-0ubuntu0.12.04.2
quantal

released

4.1.5-0ubuntu0.12.10.2
raring

released

4.2.2-0ubuntu0.13.04.2
saucy

released

4.3.0-1ubuntu1.1
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

lucid

ignored

end of life
precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

upstream

ignored

end of life

Показывать по

1.9 Low

CVSS2

Связанные уязвимости

redhat
больше 11 лет назад

The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive information (hypervisor stack content) via unspecified vectors related to stale data in a segment register.

nvd
больше 11 лет назад

The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive information (hypervisor stack content) via unspecified vectors related to stale data in a segment register.

debian
больше 11 лет назад

The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier ...

github
около 3 лет назад

The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive information (hypervisor stack content) via unspecified vectors related to stale data in a segment register.

oracle-oval
больше 11 лет назад

ELSA-2013-1449: kernel security and bug fix update (MODERATE)

1.9 Low

CVSS2