Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-3340

Опубликовано: 28 апр. 2015
Источник: ubuntu
Приоритет: low
CVSS2: 2.9

Описание

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.

РелизСтатусПримечание
devel

not-affected

4.5.1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [4.4.1-0ubuntu0.14.04.6]]
lucid

DNE

precise

released

4.1.6.1-0ubuntu0.12.04.6
trusty

released

4.4.1-0ubuntu0.14.04.6
trusty/esm

DNE

trusty was released [4.4.1-0ubuntu0.14.04.6]
upstream

needs-triage

utopic

released

4.4.1-0ubuntu0.14.10.6
vivid

released

4.5.0-1ubuntu4.1
wily

not-affected

4.5.1-0ubuntu1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

not-affected

4.x only
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

ignored

end of life
utopic

DNE

vivid

DNE

wily

DNE

Показывать по

2.9 Low

CVSS2

Связанные уязвимости

redhat
почти 11 лет назад

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.

nvd
почти 11 лет назад

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.

debian
почти 11 лет назад

Xen 4.2.x through 4.5.x does not initialize certain fields, which allo ...

github
больше 3 лет назад

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.

suse-cvrf
больше 10 лет назад

Security update for xen

2.9 Low

CVSS2