Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-2152

Опубликовано: 18 мар. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 1.9

Описание

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.

РелизСтатусПримечание
devel

released

4.5.0-1ubuntu3
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [4.4.1-0ubuntu0.14.04.4]]
lucid

DNE

precise

released

4.1.6.1-0ubuntu0.12.04.5
trusty

released

4.4.1-0ubuntu0.14.04.4
trusty/esm

DNE

trusty was released [4.4.1-0ubuntu0.14.04.4]
upstream

needed

utopic

released

4.4.1-0ubuntu0.14.10.4
vivid

released

4.5.0-1ubuntu3

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

ignored

end of life
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

ignored

end of life
utopic

DNE

vivid

DNE

Показывать по

EPSS

Процентиль: 23%
0.00076
Низкий

1.9 Low

CVSS2

Связанные уязвимости

redhat
почти 11 лет назад

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.

nvd
почти 11 лет назад

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.

debian
почти 11 лет назад

Xen 4.5.x and earlier enables certain default backends when emulating ...

github
больше 3 лет назад

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.

suse-cvrf
почти 11 лет назад

Security update for Xen

EPSS

Процентиль: 23%
0.00076
Низкий

1.9 Low

CVSS2

Уязвимость CVE-2015-2152