8.6
CVSSv3

CVE-2015-8555

CVSSv4: NA | CVSSv3: 8.6 | CVSSv2: 5 | VMScore: 960 | EPSS: 0.0033 | KEV: Not Included
Published: 13/04/2016 Updated: 21/11/2024

Vulnerability Summary

Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and previous versions do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

citrix xenserver 6.0

xen xen 4.3.0

xen xen 4.3.1

xen xen 4.3.2

xen xen 4.3.3

xen xen 4.3.4

xen xen 4.4.0

xen xen 4.4.1

xen xen 4.4.2

xen xen 4.4.3

xen xen 4.4.4

xen xen 4.5.0

xen xen 4.5.1

xen xen 4.5.2

xen xen 4.5.3

xen xen 4.6.0

xen xen 4.6.1

Vendor Advisories

Debian Bug report logs - #823620 Multiple security issues Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Fri, 6 May 2016 18:03:02 UTC Severity: grave Tags: security Fixed in versions xen/480~rc3-1, xen/48 ...
Multiple security issues have been found in the Xen virtualisation solution, which may result in denial of service or information disclosure The oldstable distribution (wheezy) will be updated in a separate DSA For the stable distribution (jessie), these problems have been fixed in version 441-9+deb8u4 For the unstable distribution (sid), thes ...
Xen 46x, 45x, 44x, 43x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors ...