CVE:CVE-2015-5165
CNNVD:CNNVD-201508-088
Xen是英国剑桥（Cambridge）大学的一款开源的虚拟机监视器产品。该产品能够使不同和不兼容的操作系统运行在同一台计算机上，并支持在运行时进行迁移，保证正常运行并且避免宕机。
Xen 4.5.x及之前版本存在信息泄露漏洞。远程攻击者可利用该漏洞读取进程堆内存。
solution:Upgrade xen xen to a higher version than 4.5.0,4.5.1,and avoid the version (,4.5.0],4.5.1; Upgrade fedoraproject fedora to a higher version than 21,22,and avoid the version 21,22; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_server to a higher version than 10:sp4,11:sp1,and avoid the version 10:sp4,11:sp1; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat openstack to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat virtualization to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux_compute_node_eus to a higher version than 7.1,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.1,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.7,and avoid the version 6.7; Upgrade redhat enterprise_linux_eus_compute_node to a higher version than 6.7,and avoid the version 6.7; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_for_power_big_endian_eus to a higher version than 6.7_ppc64,7.1_ppc64,7.2_ppc64,7.3_ppc64,7.4_ppc64,7.5_ppc64,7.6_ppc64,7.7_ppc64,and avoid the version 6.7_ppc64,7.1_ppc64,7.2_ppc64,7.3_ppc64,7.4_ppc64,7.5_ppc64,7.6_ppc64,7.7_ppc64; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.1,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 7.1,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_eus_from_rhui to a higher version than 6.7,and avoid the version 6.7; Upgrade redhat enterprise_linux_server_from_rhui to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,7.7,and avoid the version 7.3,7.6,7.7; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 7.2,7.3,7.4,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade arista eos to a higher version than 4.12,4.13,4.14,4.15,and avoid the version 4.12,4.13,4.14,4.15; Upgrade oracle linux to a higher version than 7:0,and avoid the version 7:0