VULNERABILITY INTELLIGENCE

CVE-2015-2044

CVSS score2.1 LOW
EPSS probability0.41%
CISA KEVNot currently listed
Published2015-03-12
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references