Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-7154

Опубликовано: 21 сент. 2016
Источник: nvd
CVSS3: 6.7
CVSS2: 7.2
EPSS Низкий

Описание

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00095
Низкий

6.7 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 6.7
ubuntu
больше 9 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

CVSS3: 8.4
redhat
больше 9 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

CVSS3: 6.7
debian
больше 9 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4 ...

CVSS3: 6.7
github
больше 3 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

suse-cvrf
больше 9 лет назад

Security update for xen

EPSS

Процентиль: 27%
0.00095
Низкий

6.7 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-416