CVE-2016-10024

Опубликовано: 26 янв. 2017

Источник: nvd

CVSS3: 6

CVSS2: 4.9

EPSS Низкий

Описание

Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.

Ссылки

http://www.debian.org/security/2017/dsa-3847
http://www.securityfocus.com/bid/95021
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037517
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-202.html
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201612-56
https://support.citrix.com/article/CTX219378
Patch
Third Party Advisory
http://www.debian.org/security/2017/dsa-3847
http://www.securityfocus.com/bid/95021
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037517
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-202.html
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201612-56
https://support.citrix.com/article/CTX219378
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*

Версия до 4.8.0 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*

cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*

cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00143

Низкий

6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2016-10024

CVSS3: 6

ubuntu

около 9 лет назад

CVE-2016-10024

CVSS3: 6.8

redhat

около 9 лет назад

CVE-2016-10024

CVSS3: 6

debian

около 9 лет назад

Xen through 4.8.x allows local x86 PV guest OS kernel administrators t ...

GHSA-w5vf-65qx-rxw9

CVSS3: 6

github

больше 3 лет назад

SUSE-SU-2016:3241-1

suse-cvrf

около 9 лет назад

Security update for xen

EPSS

Процентиль: 35%

0.00143

Низкий

6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20