Total vulnerabilities in the database
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.
| Software | From | Fixed in |
|---|---|---|
| xen / xen | 4.3.2 | 4.3.2.x |
| xen / xen | 4.2.2 | 4.2.2.x |
| xen / xen | 4.2.3 | 4.2.3.x |
| xen / xen | 4.3.3 | 4.3.3.x |
| xen / xen | 4.3.0 | 4.3.0.x |
| xen / xen | 4.4.2 | 4.4.2.x |
| xen / xen | 4.2.0 | 4.2.0.x |
| xen / xen | 4.2.5 | 4.2.5.x |
| xen / xen | 4.3.4 | 4.3.4.x |
| xen / xen | 4.2.4 | 4.2.4.x |
| xen / xen | 4.4.1 | 4.4.1.x |
| xen / xen | 4.3.1 | 4.3.1.x |
| xen / xen | 4.2.1 | 4.2.1.x |
| xen / xen | 4.5.0 | 4.5.0.x |
| xen / xen | 4.4.0 | 4.4.0.x |
| suse / suse_linux_enterprise_server | 11.0-sp3 | 11.0-sp3.x |
| suse / suse_linux_enterprise_software_development_kit | 11.0-sp3 | 11.0-sp3.x |
| suse / suse_linux_enterprise_desktop | 11.0-sp3 | 11.0-sp3.x |
| fedoraproject / fedora | 22 | 22.x |
| fedoraproject / fedora | 20 | 20.x |
| fedoraproject / fedora | 21 | 21.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| suse / linux_enterprise_software_development_kit | 12 | 12.x |
| suse / linux_enterprise_desktop | 12 | 12.x |
| opensuse / opensuse | 13.1 | 13.1.x |
| suse / suse_linux_enterprise_server | 12 | 12.x |