CVE-2015-3340
EUVD-2015-338528.04.2015, 14:59
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| xen | xen | 4.2.0 |
| xen | xen | 4.2.1 |
| xen | xen | 4.2.2 |
| xen | xen | 4.2.3 |
| xen | xen | 4.2.4 |
| xen | xen | 4.2.5 |
| xen | xen | 4.3.0 |
| xen | xen | 4.3.1 |
| xen | xen | 4.3.2 |
| xen | xen | 4.3.3 |
| xen | xen | 4.3.4 |
| xen | xen | 4.4.0 |
| xen | xen | 4.4.1 |
| xen | xen | 4.4.2 |
| xen | xen | 4.5.0 |
| suse | suse_linux_enterprise_software_development_kit | 11.0:sp3 |
| suse | suse_linux_enterprise_desktop | 11.0:sp3 |
| suse | suse_linux_enterprise_server | 11.0:sp3 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| opensuse | opensuse | 13.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References