CVE-2012-4411: The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor

Unscored severity · published Nov 23, 2012

CVE-2012-4411

The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor

–

CVSS

0.4%

EPSS

On KEV

Description

The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 32% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Xen · Xen

4.0.0; 4.1.0; 4.2.0 · source: NVD

Affected product

Xen

All Xen CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2012-4411

CVE.org

https://www.cve.org/CVERecord?id=CVE-2012-4411

lists.opensuse.org

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html

lists.opensuse.org

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html

lists.opensuse.org

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

lists.opensuse.org

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

lists.opensuse.org

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

lists.xen.org

http://lists.xen.org/archives/html/xen-announce/2012-09/msg00007.html