FreeBSD : xen-kernel -- Information leak through version information hypercall (ef9d041e-27e2-11e5-a4a5-002590263bf5)
Low Nessus Plugin ID 84716
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionThe Xen Project reports :
The code handling certain sub-operations of the HYPERVISOR_xen_version hypercall fails to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents are copied into the destination of the operation, thus becoming visible to the guest.
A malicious guest might be able to read sensitive data relating to other guests.
SolutionUpdate the affected package.