CVEvulnerability
CVE-2016-7093
8.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.2 HIGH — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.
Affected configurations
• xen xen 4.5.3
• xen xen 4.6.3
• xen xen 4.7.0
Related
Weakness · not in database (1)
References
- http://support.citrix.com/article/CTX216071 Third Party Advisory
- http://www.securityfocus.com/bid/92865 www.securityfocus.com
- http://www.securitytracker.com/id/1036752 Third Party Advisory, VDB Entry
- http://xenbits.xen.org/xsa/advisory-186.html Patch, Vendor Advisory
- http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201611-09 security.gentoo.org
- http://support.citrix.com/article/CTX216071 Third Party Advisory
- http://www.securityfocus.com/bid/92865 www.securityfocus.com
- http://www.securitytracker.com/id/1036752 Third Party Advisory, VDB Entry
- http://xenbits.xen.org/xsa/advisory-186.html Patch, Vendor Advisory
- http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201611-09 security.gentoo.org