Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-7154

Опубликовано: 08 сент. 2016
Источник: redhat
CVSS3: 8.4
CVSS2: 7.4
EPSS Низкий

Описание

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5xenNot affected

Показывать по

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1374476xen: use after free in FIFO event channel code

EPSS

Процентиль: 41%
0.00502
Низкий

8.4 High

CVSS3

7.4 High

CVSS2

Связанные уязвимости

CVSS3: 6.7
ubuntu
почти 10 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

CVSS3: 6.7
nvd
почти 10 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

CVSS3: 6.7
debian
почти 10 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4 ...

CVSS3: 6.7
github
больше 4 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

suse-cvrf
почти 10 лет назад

Security update for xen

EPSS

Процентиль: 41%
0.00502
Низкий

8.4 High

CVSS3

7.4 High

CVSS2