tocsin

Debian/xen: unknown

The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.

Action: Upgrade xen to 4.4.1-8 or later.

Affected

introducedfixedlast affected
04.4.1-8-

Fixed versions

4.4.1-8

Sources

published · modified · JSON