The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-PAE-develUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernelUpgrade kernel-devel | Jul 6, 2016 | Mar 12, 2015 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Mar 12, 2015 |
| Freebsd | — | Upgrade xen-kernel | Dec 10, 2025 | Jul 11, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/pvgrub. | Oct 30, 2017 | Mar 12, 2015 |
| Oracle_linux | — | Upgrade kernel | Mar 22, 2016 | Mar 12, 2015 |
| Suse | — | Upgrade xen-tools-domUUpgrade xenUpgrade xen-kmp-traceUpgrade xen-kmp-defaultUpgrade xen-develUpgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade xen-doc-pdfUpgrade xen-tools | Dec 18, 2015 | Mar 12, 2015 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Mar 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub