CVE-2015-0777: Infoleak
First published: Sun Apr 05 2015(Updated: )
drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.
Credit: meissner@suse.de
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xen XAPI | =3.4.0 | |
| Xen XAPI | =3.4.1 | |
| Xen XAPI | =3.4.2 | |
| Xen XAPI | =3.4.3 | |
| Xen XAPI | =3.4.4 | |
| Linux Kernel | =2.6.18 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html
- http://www.securityfocus.com/bid/73921
- https://bugzilla.novell.com/show_bug.cgi?id=917830
Frequently Asked Questions
What is the severity of CVE-2015-0777?
CVE-2015-0777 is considered to be of medium severity due to its potential for information disclosure.
How do I fix CVE-2015-0777?
To fix CVE-2015-0777, you should update to the latest version of the Xen hypervisor that addresses this vulnerability.
What systems are affected by CVE-2015-0777?
CVE-2015-0777 affects Xen versions 3.4.0 to 3.4.4 running on certain Linux distributions, specifically SUSE Linux.
What type of vulnerability is CVE-2015-0777?
CVE-2015-0777 is an information disclosure vulnerability that allows guest OS users to access uninitialized memory in the host OS.
Is CVE-2015-0777 exploitable remotely?
CVE-2015-0777 cannot be exploited remotely as it requires access to the guest operating system.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/xen
- canonical/xen xapi
- version/xen xapi/3.4.0
- version/xen xapi/3.4.1
- version/xen xapi/3.4.2
- version/xen xapi/3.4.3
- version/xen xapi/3.4.4
- vendor/linux
- canonical/linux kernel
- version/linux kernel/2.6.18