CVE-2012-4411
Fixed in a distro release EPSS <1%
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.1.3-2 |
| Debian 13 | xen | 4.1.3-2 |
| Debian 14 | xen | 4.1.3-2 |
| Debian 6.0 | xen-qemu-dm-4.0 | 4.0.1-2+squeeze2 |
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 |