Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 4.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Oct 2, 2014 |
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-xen-devel | Dec 1, 2016 | Jun 18, 2014 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Jun 18, 2014 |
| Gentoo Linux | — | Upgrade app-emulations/xen-pvgrub.Upgrade app-emulations/xen.Upgrade app-emulations/xen-tools. | Oct 30, 2017 | Jun 18, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 18, 2014 |
| Suse | — | Upgrade xen-toolsUpgrade xen-develUpgrade xen-doc-pdfUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade xen-kmp-traceUpgrade xen-libsUpgrade xen-kmp-defaultUpgrade xenUpgrade xen-tools-domUUpgrade xen-kmp-pae | Dec 18, 2015 | Jun 18, 2014 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Jun 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub