CVE-2015-8553 PUBLISHED

Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.

EPSS 0.27% · 50.6th percentile

Risk Scores

EPSS Score
0.27%
50.6th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSlinux-azure-6.146.14.0-1017.17~24.04.1, 6.14.0-1012.12~24.04.1, 6.14.0-1010.10~24.04.1
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips4.15.0-2120.126, 4.15.0-2119.125, 4.15.0-2118.124
Ubuntu:20.04:LTSlinux-hwe-5.115.11.0-37.41~20.04.2, 5.11.0-38.42~20.04.1, 0
Ubuntu:24.04:LTSlinux-raspi6.8.0-1001.1, 6.7.0-1001.1, 6.5.0-1005.7
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1, 0, 6.5.0-9.9.1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1058.66, 5.15.0-1064.72, 5.15.0-1063.71
Ubuntu:20.04:LTSlinux-gcp-5.85.8.0-1032.34~20.04.1, 0, 5.8.0-1038.40~20.04.1
Ubuntu:Pro:18.04:LTSlinux-azure-5.45.4.0-1078.81~18.04.1, 5.4.0-1116.123~18.04.1, 5.4.0-1115.122~18.04.1
Ubuntu:Pro:18.04:LTSlinux4.15.0-22.24, 4.15.0-23.25, 4.15.0-24.26
Ubuntu:Pro:20.04:LTSlinux-oracle5.4.0-1107.116, 5.4.0-1152.162, 5.4.0-1151.161
Ubuntu:Pro:20.04:LTSlinux-azure5.4.0-1114.120, 5.4.0-1113.119, 5.4.0-1112.118
Ubuntu:20.04:LTSlinux-oracle-5.115.11.0-1028.31~20.04.1, 0, 5.11.0-1008.8~20.04.1
Ubuntu:Pro:20.04:LTSlinux-iot5.4.0-1012.14, 5.4.0-1011.13, 5.4.0-1010.12
Ubuntu:24.04:LTSlinux-ibm6.5.0-1009.9, 6.8.0-1028.28, 6.8.0-1027.27
Ubuntu:Pro:Realtime:22.04:LTSlinux-realtime5.15.0-1051.57, 5.15.0-1086.95, 5.15.0-1087.96
Ubuntu:22.04:LTSlinux-intel-iot-realtime0, 5.15.0-1073.75
Ubuntu:22.04:LTSlinux-azure-5.195.19.0-1022.23~22.04.1, 5.19.0-1023.24~22.04.1, 5.19.0-1025.28~22.04.1
Ubuntu:24.04:LTSlinux-gcp-6.170, 6.17.0-1008.8~24.04.1, 6.17.0-1004.4~24.04.3
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1004.4, 6.5.0-1013.13, 6.5.0-1014.14
Ubuntu:18.04:LTSlinux-gkeop-5.45.4.0-1029.30~18.04.2, 5.4.0-1031.32~18.04.1, 5.4.0-1032.33~18.04.1

…and 220 more

Timeline

References

Open in Interactive Console →