CVE-2020-11740

An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other…

published April 14, 2020

CVSS
—
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.6th percentile
Published
2020-04-14T12:18Z
EPSS history
Timeline
  • 14 APR 12:18Z
    An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other…
    cvelistv5