CVEvulnerability
CVE-2016-9386
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.
Affected configurations
• citrix xenserver 6.0.2
• citrix xenserver 6.2.0
• citrix xenserver 6.5
• citrix xenserver 7.0
• xen xen
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/94471 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037340 Third Party Advisory, VDB Entry
- http://xenbits.xen.org/xsa/advisory-191.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201612-56 security.gentoo.org
- https://support.citrix.com/article/CTX218775 Patch, Third Party Advisory
- http://www.securityfocus.com/bid/94471 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037340 Third Party Advisory, VDB Entry
- http://xenbits.xen.org/xsa/advisory-191.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201612-56 security.gentoo.org
- https://support.citrix.com/article/CTX218775 Patch, Third Party Advisory