Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-3157

Опубликовано: 12 апр. 2016
Источник: nvd
CVSS3: 7.8
CVSS2: 7.2
EPSS Низкий

Описание

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 57%
0.00356
Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 9 лет назад

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.

CVSS3: 7
redhat
больше 9 лет назад

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.

CVSS3: 7.8
debian
около 9 лет назад

The __switch_to function in arch/x86/kernel/process_64.c in the Linux ...

CVSS3: 7.8
github
около 3 лет назад

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.

oracle-oval
больше 8 лет назад

ELSA-2016-3657: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 57%
0.00356
Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264