CVE-2015-8553: Infoleak
Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8553?
CVE-2015-8553 has a medium severity rating due to potential information disclosure risks.
How do I fix CVE-2015-8553?
To fix CVE-2015-8553, update the affected software packages to the latest versions provided by the vendors.
What versions of software are affected by CVE-2015-8553?
CVE-2015-8553 affects specific versions of the Linux package, Xen, and Red Hat Enterprise Linux 5.
Can CVE-2015-8553 allow guest OS users to access host OS data?
Yes, CVE-2015-8553 allows guest OS users to obtain sensitive information from uninitialized locations in the host OS kernel memory.
Is CVE-2015-8553 related to another vulnerability?
Yes, CVE-2015-8553 is an incomplete fix for the previously reported CVE-2015-0777.