CVE-2015-2045
published 2015-03-12CVE-2015-2045: The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain…
PriorityP45low2.1CVSS 2.0
AVLACLAuNCPINAN
EPSS
0.47%
37.4th percentile
The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.
Affected
42 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | xen | < xen 4.4.1-8 (bookworm) | xen 4.4.1-8 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv2.1LOW
vendor_debian2.1LOW
vendor_redhat2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
xen: information leak via version information hypercall (XSA-122)
vendor_redhat·2015-03-06·CVSS 2.1
CVE-2015-2045 [LOW] CWE-212 xen: information leak via version information hypercall (XSA-122)
xen: information leak via version information hypercall (XSA-122)
The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.
Statement: This issue does affect the Xen hypervisor as shipped with Red Hat Enterprise Linux 5.
Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.
Package: xen (Red Hat Enterprise Linux 5) - Affected
Debian
CVE-2015-2045: xen - The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properl...
vendor_debian·2015·CVSS 2.1
CVE-2015-2045 [LOW] CVE-2015-2045: xen - The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properl...
The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.
Scope: local
bookworm: resolved (fixed in 4.4.1-8)
bullseye: resolved (fixed in 4.4.1-8)
forky: resolved (fixed in 4.4.1-8)
sid: resolved (fixed in 4.4.1-8)
trixie: resolved (fixed in 4.4.1-8)
GHSA
GHSA-hp7f-c7cj-cfg9: The HYPERVISOR_xen_version hypercall in Xen 3
ghsa_unreviewed·2022-05-14
CVE-2015-2045 [LOW] CWE-200 GHSA-hp7f-c7cj-cfg9: The HYPERVISOR_xen_version hypercall in Xen 3
The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.
OSV
CVE-2015-2045: The HYPERVISOR_xen_version hypercall in Xen 3
osv·2015-03-12·CVSS 2.1
CVE-2015-2045 [LOW] CVE-2015-2045: The HYPERVISOR_xen_version hypercall in Xen 3
The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.htmlhttp://support.citrix.com/article/CTX200484http://www.debian.org/security/2015/dsa-3181http://www.securityfocus.com/bid/72955http://www.securitytracker.com/id/1031806http://www.securitytracker.com/id/1031837http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htmhttp://xenbits.xen.org/xsa/advisory-122.htmlhttps://security.gentoo.org/glsa/201504-04http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.htmlhttp://support.citrix.com/article/CTX200484http://www.debian.org/security/2015/dsa-3181http://www.securityfocus.com/bid/72955http://www.securitytracker.com/id/1031806http://www.securitytracker.com/id/1031837http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htmhttp://xenbits.xen.org/xsa/advisory-122.htmlhttps://security.gentoo.org/glsa/201504-04
2015-03-12
Published