CVEvulnerability
CVE-2015-0777
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-04-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.
Affected configurations
• xen xen 3.4.0
• xen xen 3.4.1
• xen xen 3.4.2
• xen xen 3.4.3
• xen xen 3.4.4
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html lists.opensuse.org
- http://www.securityfocus.com/bid/73921 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=917830 bugzilla.novell.com
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html lists.opensuse.org
- http://www.securityfocus.com/bid/73921 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=917830 bugzilla.novell.com