Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-3340HistoryApr 28, 2015 - 2:59 p.m.
CVE-2015-3340
2015-04-2814:59:00
Debian Security Bug Tracker
security-tracker.debian.org
10
2.9 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
50.0%
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 11 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 10 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 999 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 13 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
Related
cve
cve
CVE-2015-3340
2015-04-28 14:59:00
openvas
openvas
Fedora Update for xen FEDORA-2015-6569
2015-07-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0940-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0944-1)
2021-06-09 00:00:00
nessus
nessus
Fedora 21 : xen-4.4.2-3.fc21 (2015-6670)
2015-05-04 00:00:00
Fedora 20 : xen-4.3.4-3.fc20 (2015-6583)
2015-05-04 00:00:00
Fedora 22 : xen-4.5.0-8.fc22 (2015-6569)
2015-04-27 00:00:00
freebsd
freebsd
xen-kernel -- Information leak through XEN_DOMCTL_gettscinfo
2015-04-20 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.0-8.fc22
2015-04-26 12:50:51
[SECURITY] Fedora 21 Update: xen-4.4.2-3.fc21
2015-05-02 18:04:27
[SECURITY] Fedora 21 Update: xen-4.4.2-4.fc21
2015-05-26 03:21:20
prion
prion
Cross site request forgery (csrf)
2015-04-28 14:59:00
ubuntucve
ubuntucve
CVE-2015-3340
2015-04-28 00:00:00
xen
xen
Information leak through XEN_DOMCTL_gettscinfo
2015-04-20 17:10:00
suse
suse
Security update for Xen (important)
2015-05-26 14:07:44
Security update for xen (important)
2015-06-02 10:04:52
Security update for Xen (important)
2015-05-22 00:04:46
debian
debian
[SECURITY] [DSA 3414-1] xen security update
2015-12-09 20:43:14
mageia
mageia
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
gentoo
gentoo
Xen: Multiple vulnerabilities
2016-04-05 00:00:00
2.9 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
50.0%
Related for DEBIANCVE:CVE-2015-3340