CVE-2015-8555
13.04.2016, 15:59
Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| citrix | xenserver | 6.0 |
| xen | xen | 4.3.0 |
| xen | xen | 4.3.1 |
| xen | xen | 4.3.2 |
| xen | xen | 4.3.3 |
| xen | xen | 4.3.4 |
| xen | xen | 4.4.0 |
| xen | xen | 4.4.1 |
| xen | xen | 4.4.2 |
| xen | xen | 4.4.3 |
| xen | xen | 4.4.4 |
| xen | xen | 4.5.0 |
| xen | xen | 4.5.1 |
| xen | xen | 4.5.2 |
| xen | xen | 4.5.3 |
| xen | xen | 4.6.0 |
| xen | xen | 4.6.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References