FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

xen-kernel -- Information leak through version information hypercall

Affected packages
xen-kernel < 4.5.0_3

Details

VuXML ID ef9d041e-27e2-11e5-a4a5-002590263bf5
Discovery 2015-03-05
Entry 2015-07-11

The Xen Project reports:

The code handling certain sub-operations of the HYPERVISOR_xen_version hypercall fails to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents are copied into the destination of the operation, thus becoming visible to the guest.

A malicious guest might be able to read sensitive data relating to other guests.

References

CVE Name CVE-2015-2045
URL http://xenbits.xen.org/xsa/advisory-122.html