Published: 27/02/2017 Updated: 28/07/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.5 | Impact Score: 4 | Exploitability Score: 2

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Xen up to and including 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at EL2.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 4.7.0
xen xen 4.7.1

Debian Bug report logs - #845667 xen: CVE-2016-9384: guest 32-bit ELF symbol table load leaking host data Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 25 Nov 2016 18:45:07 UTC Severity: important T ...

Debian Bug report logs - #848713 xen: CVE-2016-10013: x86: Mishandling of SYSCALL singlestep during emulation Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 19 Dec 2016 19:06:01 UTC Severity: importa ...

Debian Bug report logs - #845669 xen: CVE-2016-9377 CVE-2016-9378: x86 software interrupt injection mis-handled Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 25 Nov 2016 18:54:01 UTC Severity: impor ...

Xen through 47x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at EL2 ...

CWE-284 http://xenbits.xen.org/xsa/xsa201-2.patch http://xenbits.xen.org/xsa/advisory-201.html http://www.securityfocus.com/bid/94581 http://www.openwall.com/lists/oss-security/2016/12/05/7 http://www.openwall.com/lists/oss-security/2016/11/29/3 https://security.gentoo.org/glsa/201612-56 http://www.securitytracker.com/id/1037358 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845667

CVE-2016-9816

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect