Описание
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [4.4.2-0ubuntu0.14.04.7]] |
| esm-infra/xenial | not-affected | 4.6.0-1ubuntu4.1 |
| precise | not-affected | 4.1.6.1-0ubuntu0.12.04.11 |
| trusty | released | 4.4.2-0ubuntu0.14.04.7 |
| trusty/esm | DNE | trusty was released [4.4.2-0ubuntu0.14.04.7] |
| upstream | needs-triage | |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| xenial | not-affected | 4.6.0-1ubuntu4.1 |
Показывать по
EPSS
7.2 High
CVSS2
6.7 Medium
CVSS3
Связанные уязвимости
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4 ...
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
EPSS
7.2 High
CVSS2
6.7 Medium
CVSS3