CVE-2018-10472 — Sensitive Information Exposure in XEN

CWE-200 — Sensitive Information Exposure6 documents6 sources
Severity
5.6MEDIUMNVD
EPSS
0.1%
top 75.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
XENDebian XENDebian Linux
Timeline
PublishedApr 27
Latest updateMay 14

Description

An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifying the target file as the backing file of a snapshot.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NExploitability: 1.1 | Impact: 4.0

Affected Packages3 packages

▶debiandebian/xen< xen 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6 (bookworm)
▶Debianxen/xen< 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6+3
▶NVDxen/xen4.10.1

Also affects: Debian Linux 9.0

🔴Vulnerability Details

2
GHSA
GHSA-pg2r-jv9g-9mg7: An issue was discovered in Xen through 4↗2022-05-14
▶
OSV
CVE-2018-10472: An issue was discovered in Xen through 4↗2018-04-27
▶

📋Vendor Advisories

2
Red Hat
xen: Information leak via crafted user-supplied CDROM↗2018-04-25
▶
Debian
CVE-2018-10472: xen - An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (i...↗2018
▶

💬Community

1
Bugzilla
CVE-2018-10472 xsa258 xen: Information leak via crafted user-supplied CDROM↗2018-04-11
▶