CVE-2016-7093

Опубликовано: 21 сент. 2016

Источник: nvd

CVSS3: 8.2

CVSS2: 7.2

EPSS Низкий

Описание

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.

Ссылки

http://support.citrix.com/article/CTX216071
Third Party Advisory
http://www.securityfocus.com/bid/92865
http://www.securitytracker.com/id/1036752
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-186.html
Patch
Vendor Advisory
http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201611-09
http://support.citrix.com/article/CTX216071
Third Party Advisory
http://www.securityfocus.com/bid/92865
http://www.securitytracker.com/id/1036752
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-186.html
Patch
Vendor Advisory
http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201611-09

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00425

Низкий

8.2 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2016-7093

CVSS3: 8.2

ubuntu

почти 10 лет назад

CVE-2016-7093

CVSS3: 8.5

redhat

почти 10 лет назад

CVE-2016-7093

CVSS3: 8.2

debian

почти 10 лет назад

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to ...

GHSA-f8fq-24rx-53q7

CVSS3: 8.2

github

больше 4 лет назад

SUSE-SU-2016:2507-1

suse-cvrf

почти 10 лет назад

Security update for xen

EPSS

Процентиль: 35%

0.00425

Низкий

8.2 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264