Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-7154

Опубликовано: 08 сент. 2016
Источник: redhat
CVSS3: 8.4
CVSS2: 7.4
EPSS Низкий

Описание

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5xenNot affected

Показывать по

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1374476xen: use after free in FIFO event channel code

EPSS

Процентиль: 27%
0.00095
Низкий

8.4 High

CVSS3

7.4 High

CVSS2

Связанные уязвимости

CVSS3: 6.7
ubuntu
больше 9 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

CVSS3: 6.7
nvd
больше 9 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

CVSS3: 6.7
debian
больше 9 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4 ...

CVSS3: 6.7
github
больше 3 лет назад

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

suse-cvrf
больше 9 лет назад

Security update for xen

EPSS

Процентиль: 27%
0.00095
Низкий

8.4 High

CVSS3

7.4 High

CVSS2