CVE-2012-4411: Infoleak
Published Nov 23, 2012
·Updated
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
Affected Software
3 affected components
XEN Xen=4.0.0
XEN Xen=4.1.0
XEN Xen=4.2.0
Event History
Nov 23, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4411?
CVE-2012-4411 has a medium severity level as it allows local OS guest administrators to access sensitive host resource information.
2
How do I fix CVE-2012-4411?
To fix CVE-2012-4411, you should upgrade to the latest version of Xen that addresses this vulnerability.
3
What versions of Xen are affected by CVE-2012-4411?
CVE-2012-4411 affects Xen versions 4.0.0, 4.1.0, and 4.2.0.
4
Who can exploit CVE-2012-4411?
Local OS guest administrators can exploit CVE-2012-4411 to retrieve sensitive information from the host.
5
Is CVE-2012-4411 a duplicate of another vulnerability?
Yes, CVE-2012-4411 may be a duplicate of CVE-2007-0998.