Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-9386

Опубликовано: 23 янв. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6
CVSS3: 7.8

Описание

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

РелизСтатусПримечание
devel

released

4.8.0-1ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [4.4.2-0ubuntu0.14.04.9]]
esm-infra/xenial

released

4.6.0-1ubuntu4.3
precise

released

4.1.6.1-0ubuntu0.12.04.13
precise/esm

DNE

precise was released [4.1.6.1-0ubuntu0.12.04.13]
trusty

released

4.4.2-0ubuntu0.14.04.9
trusty/esm

DNE

trusty was released [4.4.2-0ubuntu0.14.04.9]
upstream

needed

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

Показывать по

EPSS

Процентиль: 28%
0.001
Низкий

4.6 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
около 9 лет назад

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

CVSS3: 7.8
nvd
около 9 лет назад

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

CVSS3: 7.8
debian
около 9 лет назад

The x86 emulator in Xen does not properly treat x86 NULL segments as u ...

CVSS3: 7.8
github
больше 3 лет назад

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

suse-cvrf
около 9 лет назад

Security update for xen

EPSS

Процентиль: 28%
0.001
Низкий

4.6 Medium

CVSS2

7.8 High

CVSS3