CVE-2015-0777: Infoleak
drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0777?
CVE-2015-0777 is considered to be of medium severity due to its potential for information disclosure.
How do I fix CVE-2015-0777?
To fix CVE-2015-0777, you should update to the latest version of the Xen hypervisor that addresses this vulnerability.
What systems are affected by CVE-2015-0777?
CVE-2015-0777 affects Xen versions 3.4.0 to 3.4.4 running on certain Linux distributions, specifically SUSE Linux.
What type of vulnerability is CVE-2015-0777?
CVE-2015-0777 is an information disclosure vulnerability that allows guest OS users to access uninitialized memory in the host OS.
Is CVE-2015-0777 exploitable remotely?
CVE-2015-0777 cannot be exploited remotely as it requires access to the guest operating system.