CVE-2015-8555

Description

Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.

Risk Information

Base Score

8.6

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.551

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Citrix XenCenter 6.0	Windows
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8555)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234