Lucene search
+L

2211 matches found

Prion
Prion
added 2015/03/12 2:59 p.m.33 views

Information disclosure

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

2.1CVSS6.2AI score0.00414EPSS
SaveExploits0References12Affected Software1
OSV
OSV
added 2015/03/12 2:59 p.m.6 views

DEBIAN-CVE-2015-2044

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

2.1CVSS6.8AI score0.00414EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2015/03/12 2:59 p.m.34 views

CVE-2015-2044

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

2.1CVSS6.9AI score0.00414EPSS
SaveExploits0References2
NVD
NVD
added 2015/03/12 2:59 p.m.17 views

CVE-2015-2044

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

2.1CVSS6.4AI score0.00414EPSS
SaveExploits0References12
OSV
OSV
added 2015/03/12 2:59 p.m.6 views

UBUNTU-CVE-2015-2044

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

2.1CVSS6.9AI score0.00414EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2015/03/12 2:00 p.m.29 views

CVE-2015-2044

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

5.2AI score0.00414EPSS
SaveExploits0References12
CVE
CVE
added 2015/03/12 2:00 p.m.105 views

CVE-2015-2044

CVE-2015-2044 concerns the Xen hypervisor: the emulation routines for unspecified X86 devices in Xen 3.2.x–4.5.x do not properly initialize data, enabling local HVM guest users to obtain sensitive information via an unsupported access size. The Mageia advisory MGASA-2016-0098 documents this CVE a...

2.1CVSS4.8AI score0.00414EPSS
SaveExploits0References12Affected Software1
Debian CVE
Debian CVE
added 2015/03/12 2:00 p.m.38 views

CVE-2015-2044

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

2.1CVSS6AI score0.00414EPSS
SaveExploits0
CNVD
CNVD
added 2015/03/12 12:00 a.m.35 views

Microsoft windows kernel local elevation of privilege vulnerability (CNVD-2015-01619)

Microsoft Windows is a popular operating system. A local elevation of privilege vulnerability exists in Microsoft windows kernel due to the program failing to properly check and execute the emulation level. A local attacker is allowed to exploit the vulnerability to build a malicious application...

7.2CVSS6.9AI score0.01636EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/03/10 12:00 a.m.41 views

Debian Security Advisory DSA 3181-1 (xen - security update)

Multiple security issues have been found in the Xen virtualisation solution: CVE-2015-2044 Information leak via x86 system device emulation. CVE-2015-2045 Information leak in the HYPERVISORxenversion hypercall. CVE-2015-2151 Missing input sanitising in the x86 emulator could result in information...

7.2CVSS0.2AI score0.0057EPSS
SaveExploits0References1
Xen Project
Xen Project
added 2015/03/05 12:00 p.m.76 views

Information leak via internal x86 system device emulation

ISSUE DESCRIPTION Emulation routines in the hypervisor dealing with certain system devices check whether the access size by the guest is a supported one. When the access size is unsupported these routines failed to set the data to be returned to the guest for read accesses, so that hypervisor sta...

2.1CVSS6.5AI score0.00414EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2015/03/05 12:00 a.m.8 views

Xen External X86 System Device Emulation Information Disclosure Vulnerability

Xen is an open source virtual machine. Xen has a security vulnerability that allows a malicious HVM Guest to simulate reading sensitive data from other Guests via an external X86 system setting...

2.1CVSS6.7AI score0.00414EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2015/03/05 12:00 a.m.36 views

xen-kernel -- Information leak via internal x86 system device emulation

The Xen Project reports: Emulation routines in the hypervisor dealing with certain system devices check whether the access size by the guest is a supported one. When the access size is unsupported these routines failed to set the data to be returned to the guest for read accesses, so that...

2.1CVSS6.8AI score0.00414EPSS
SaveExploits0References1
Prion
Prion
added 2015/03/02 11:59 a.m.27 views

Information disclosure

The emsysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service guest OS crash by triggering use of a 16-bit code segment for emulation of a...

4.4CVSS7.2AI score0.00643EPSS
SaveExploits1References18Affected Software7
Tenable Nessus
Tenable Nessus
added 2015/02/27 12:00 a.m.51 views

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2515-1)

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

7.8CVSS7AI score0.05489EPSS
SaveExploits4References13
Tenable Nessus
Tenable Nessus
added 2015/02/27 12:00 a.m.35 views

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2513-1)

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

6.9CVSS6.8AI score0.05489EPSS
SaveExploits4References9
OpenVAS
OpenVAS
added 2015/02/27 12:00 a.m.51 views

Ubuntu: Security Advisory (USN-2515-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.05489EPSS
SaveExploits4References2
Ubuntu
Ubuntu
added 2015/02/26 11:22 a.m.81 views

USN-2516-1: Linux kernel vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

7.8CVSS6.8AI score0.05489EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2015/02/26 11:18 a.m.81 views

USN-2515-1: Linux kernel (Trusty HWE) vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

7.8CVSS6.8AI score0.05489EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2015/02/26 11:13 a.m.89 views

USN-2514-1: Linux kernel (OMAP4) vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

6.9CVSS6.8AI score0.05489EPSS
SaveExploits4
Rows per page
Query Builder