CVE-2015-2045

The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.

• CWE-200

• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html
• http://support.citrix.com/article/CTX200484
• http://www.debian.org/security/2015/dsa-3181Third Party Advisory
• http://www.securityfocus.com/bid/72955
• http://www.securitytracker.com/id/1031806Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031837Third Party Advisory, VDB Entry
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm
• http://xenbits.xen.org/xsa/advisory-122.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201504-04
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html
• http://support.citrix.com/article/CTX200484
• http://www.debian.org/security/2015/dsa-3181Third Party Advisory
• http://www.securityfocus.com/bid/72955
• http://www.securitytracker.com/id/1031806Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031837Third Party Advisory, VDB Entry
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm
• http://xenbits.xen.org/xsa/advisory-122.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201504-04

Published

Mar 12, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2039Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-2040Cross-site scripting (XSS) vulnerability in the Contact Form…
• CVE-2015-2041net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 use…
• CVE-2015-2042net/rds/sysctl.c in the Linux kernel before 3.19 uses an inc…
• CVE-2015-2043Multiple cross-site scripting (XSS) vulnerabilities in Visua…
• CVE-2015-2044The emulation routines for unspecified X86 devices in Xen 3.…
• CVE-2015-2046Cross-site scripting (XSS) vulnerability in MantisBT 1.2.13 …
• CVE-2015-2047The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 t…
• CVE-2015-2048Cross-site request forgery (CSRF) vulnerability in D-Link DC…
• CVE-2015-2049Unrestricted file upload vulnerability in D-Link DCS-931L wi…
• CVE-2015-2050D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows a…
• CVE-2015-2051The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmwa…8.8