CVE-2015-8553: Infoleak
Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8553?
CVE-2015-8553 has a medium severity rating due to potential information disclosure risks.
How do I fix CVE-2015-8553?
To fix CVE-2015-8553, update the affected software packages to the latest versions provided by the vendors.
What versions of software are affected by CVE-2015-8553?
CVE-2015-8553 affects specific versions of the Linux package, Xen, and Red Hat Enterprise Linux 5.
Can CVE-2015-8553 allow guest OS users to access host OS data?
Yes, CVE-2015-8553 allows guest OS users to obtain sensitive information from uninitialized locations in the host OS kernel memory.
Is CVE-2015-8553 related to another vulnerability?
Yes, CVE-2015-8553 is an incomplete fix for the previously reported CVE-2015-0777.