CVE-2015-0777
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
4.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.0%
drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.
Affected configurations
References
lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html
lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html
lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html
www.securityfocus.com/bid/73921
bugzilla.novell.com/show_bug.cgi?id=917830
Related
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
4.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.0%