Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

A local attacker in a guest system can read a memory fragment of
the Xen host system, in order to obtain sensitive information.

Impacted products: openSUSE, SUSE Linux Enterprise Desktop, SLES,
Xen.

Severity: 1/4.

Creation date: 13/08/2015.

DESCRIPTION OF THE VULNERABILITY

The Xen product uses the xen/usbback/usbback.c driver for USB
exchanges.

However, the copy_buff_to_pages() function does not initialize a
memory area before returning it to the user in the guest system.

A local attacker in a guest system can therefore read a memory
fragment of the Xen host system, in order to obtain sensitive
information.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Xen-information-disclosure-via-usbback-17663