CVE-2016-9817

Опубликовано: 27 фев. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.9

EPSS Низкий

Описание

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2.EA bit set.

Ссылки

http://www.openwall.com/lists/oss-security/2016/11/29/3
Mailing List
Mitigation
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/12/05/7
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94581
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037358
http://xenbits.xen.org/xsa/advisory-201.html
Mitigation
Patch
Vendor Advisory
http://xenbits.xen.org/xsa/xsa201-3-4.7.patch
Patch
Vendor Advisory
http://xenbits.xen.org/xsa/xsa201-3.patch
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201612-56
http://www.openwall.com/lists/oss-security/2016/11/29/3
Mailing List
Mitigation
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/12/05/7
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94581
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037358
http://xenbits.xen.org/xsa/advisory-201.html
Mitigation
Patch
Vendor Advisory
http://xenbits.xen.org/xsa/xsa201-3-4.7.patch
Patch
Vendor Advisory
http://xenbits.xen.org/xsa/xsa201-3.patch
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201612-56

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00098

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVE-2016-9817

CVSS3: 6.5

ubuntu

почти 9 лет назад

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2.EA bit set.

CVE-2016-9817

CVSS3: 6.3

redhat

около 9 лет назад

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2.EA bit set.

CVE-2016-9817

CVSS3: 6.5

debian

почти 9 лет назад

Xen through 4.7.x allows local ARM guest OS users to cause a denial of ...

GHSA-gx95-jg8g-jg8q

CVSS3: 6.5

github

больше 3 лет назад

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2.EA bit set.

EPSS

Процентиль: 27%

0.00098

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-284