CVE-2016-9386

EPSS 0.1%
Veröffentlicht 23.01.2017 21:59:02
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Citrix ≫ Xenserver Version6.0.2

Citrix ≫ Xenserver Version6.2.0

Citrix ≫ Xenserver Version6.5

Citrix ≫ Xenserver Version7.0

Xen ≫ Xen

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.247

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

https://security.gentoo.org/glsa/201612-56

https://support.citrix.com/article/CTX218775

Patch

Third Party Advisory

http://www.securityfocus.com/bid/94471

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1037340

Third Party Advisory

VDB Entry

http://xenbits.xen.org/xsa/advisory-191.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-9386

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9386

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9386

EUVD