CVE-2015-8553

ADVISORY - nist

Summary

Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.

EPSS Score⁠: 0.00381 (0.301)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-200⁠

Exposure of Sensitive Information to an Unauthorized Actor

Impacted images

Advisories

NIST

CREATED

10 years ago

UPDATED

24 days ago

ADVISORY IDCVE-2015-8553⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-200⁠

CVSS SCORE

6.5medium

Debian

CREATED

10 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2015-8553⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

10 years ago

UPDATED

11 days ago

ADVISORY IDCVE-2015-8553⁠

EXPLOITABILITY SCORE

2.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.5medium

Red Hat

CREATED

11 years ago

UPDATED

6 months ago

ADVISORY IDCVE-2015-8553⁠

EXPLOITABILITY SCORE

4.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.2medium