CVE

Id
80617  
CVE No.
CVE-2015-3340  
Status
Candidate  
Description
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.  
Phase
Assigned (20150420)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
729071 80617 CVE-2015-3340 CONFIRM:http://xenbits.xen.org/xsa/advisory-132.html  View
729072 80617 CVE-2015-3340 DEBIAN:DSA-3414  View
729073 80617 CVE-2015-3340 URL:http://www.debian.org/security/2015/dsa-3414  View
729074 80617 CVE-2015-3340 FEDORA:FEDORA-2015-6569  View
729075 80617 CVE-2015-3340 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156005.html  View
729076 80617 CVE-2015-3340 FEDORA:FEDORA-2015-6583  View
729077 80617 CVE-2015-3340 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157006.html  View
729078 80617 CVE-2015-3340 FEDORA:FEDORA-2015-6670  View
729079 80617 CVE-2015-3340 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156979.html  View
729080 80617 CVE-2015-3340 SUSE:SUSE-SU-2015:0927  View
729081 80617 CVE-2015-3340 URL:http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html  View
729082 80617 CVE-2015-3340 SUSE:openSUSE-SU-2015:0983  View
729083 80617 CVE-2015-3340 URL:http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html  View
729084 80617 CVE-2015-3340 SUSE:SUSE-SU-2015:0923  View
729085 80617 CVE-2015-3340 URL:http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html  View
729086 80617 CVE-2015-3340 BID:74248  View
729087 80617 CVE-2015-3340 URL:http://www.securityfocus.com/bid/74248  View
729088 80617 CVE-2015-3340 SECTRACK:1032158  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19154 JVNDB-2014-008031 Drupal 用 Ajax Timeline モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Ajax Timeline モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-3392 80617 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008031.html  View