FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

xen-kernel -- Information leak through version information hypercall

Affected packages
		xen-kernel	<	4.5.0_3

Details

VuXML ID	ef9d041e-27e2-11e5-a4a5-002590263bf5
Discovery	2015-03-05
Entry	2015-07-11

The Xen Project reports:

The code handling certain sub-operations of the HYPERVISOR_xen_version hypercall fails to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents are copied into the destination of the operation, thus becoming visible to the guest.

A malicious guest might be able to read sensitive data relating to other guests.

[source]

References

CVE Name	CVE-2015-2045
URL	http://xenbits.xen.org/xsa/advisory-122.html