NetSight
IP …
low1.5

CVE-2013-4355

Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory map…

Impact

Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.

Affected products

VendorProductAffected versions
XenXen
through 4.3.0
Versions 3.0.2, 3.0.3, 3.0.4, 3.1.3, 3.1.4

Weakness classification

CWE-200

References