CVE-2016-9386

EPSS 0.1%
Published 23.01.2017 21:59:02
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

Affected products Warnungen 0 Metrics 3 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Citrix ≫ Xenserver Version6.0.2

Citrix ≫ Xenserver Version6.2.0

Citrix ≫ Xenserver Version6.5

Citrix ≫ Xenserver Version7.0

Xen ≫ Xen

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.1%	0.247

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

https://security.gentoo.org/glsa/201612-56

https://support.citrix.com/article/CTX218775

Patch

Third Party Advisory

http://www.securityfocus.com/bid/94471

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1037340

Third Party Advisory

VDB Entry

http://xenbits.xen.org/xsa/advisory-191.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-9386

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9386

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9386

EUVD