UBUNTU-CVE-2015-2045

The HYPERVISORxenversion hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors...

PT-2015-5566

Name of the Vulnerable Software and Affected Versions Xen versions 3.2.x through 4.5.x Description The issue allows local guest users to obtain sensitive information due to improper initialization of data structures by the HYPERVISOR xen version hypercall. Recommendations For versions 3.2.x throu...

Information leak through version information hypercall

ISSUE DESCRIPTION The code handling certain sub-operations of the HYPERVISORxenversion hypercall fails to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents are copied into the destination of the operation, thus becoming visib...