Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2015-8555

Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.

  • Published: Apr 13, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-8555
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.6
  • AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
citrix / xenserver 6.0 6.0.x
xen / xen 4.3.2 4.3.2.x
xen / xen 4.6.0 4.6.0.x
xen / xen 4.3.3 4.3.3.x
xen / xen 4.3.0 4.3.0.x
xen / xen 4.5.2 4.5.2.x
xen / xen 4.4.2 4.4.2.x
xen / xen 4.4.4 4.4.4.x
xen / xen 4.4.3 4.4.3.x
xen / xen 4.6.1 4.6.1.x
xen / xen 4.5.3 4.5.3.x
xen / xen 4.3.4 4.3.4.x
xen / xen 4.5.1 4.5.1.x
xen / xen 4.4.1 4.4.1.x
xen / xen 4.3.1 4.3.1.x
xen / xen 4.5.0 4.5.0.x
xen / xen 4.4.0 4.4.0.x