The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xen | Jul 30, 2024 | Mar 12, 2015 |
| Freebsd | — | Upgrade xen-kernel | Dec 10, 2025 | Jul 11, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Oct 30, 2017 | Mar 12, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 6, 2015 |
| Suse | — | Upgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade xen-libsUpgrade xen-doc-pdfUpgrade xen-toolsUpgrade xen-develUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade xenUpgrade xen-kmp-traceUpgrade xen-tools-domU | Dec 18, 2015 | Mar 12, 2015 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Mar 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub