6.8

CVE-2016-4962

The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Vm Server Version 3.3
Oracle ≫ Vm Server Version 3.4
Xen ≫ Xen Version 4.3.0
Xen ≫ Xen Version 4.3.1
Xen ≫ Xen Version 4.3.2
Xen ≫ Xen Version 4.3.3
Xen ≫ Xen Version 4.3.4
Xen ≫ Xen Version 4.4.0
Xen ≫ Xen Version 4.4.0 Update rc1
Xen ≫ Xen Version 4.4.1
Xen ≫ Xen Version 4.4.2
Xen ≫ Xen Version 4.4.3
Xen ≫ Xen Version 4.4.4
Xen ≫ Xen Version 4.5.0
Xen ≫ Xen Version 4.5.1
Xen ≫ Xen Version 4.5.2
Xen ≫ Xen Version 4.5.3
Xen ≫ Xen Version 4.6.0
Xen ≫ Xen Version 4.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.318
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
Vendor Advisory
http://www.debian.org/security/2016/dsa-3633
http://www.securityfocus.com/bid/91006
http://www.securitytracker.com/id/1036023
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-175.html
Vendor Advisory