Published: 27/02/2017 Updated: 28/07/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.5 | Impact Score: 4 | Exploitability Score: 2

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Xen up to and including 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2.EA bit set.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 4.7.1
xen xen 4.7.0

Debian Bug report logs - #845667 xen: CVE-2016-9384: guest 32-bit ELF symbol table load leaking host data Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 25 Nov 2016 18:45:07 UTC Severity: important T ...

Debian Bug report logs - #848713 xen: CVE-2016-10013: x86: Mishandling of SYSCALL singlestep during emulation Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 19 Dec 2016 19:06:01 UTC Severity: importa ...

Debian Bug report logs - #845669 xen: CVE-2016-9377 CVE-2016-9378: x86 software interrupt injection mis-handled Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 25 Nov 2016 18:54:01 UTC Severity: impor ...

Xen through 47x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2EA bit set ...

CWE-284 http://xenbits.xen.org/xsa/xsa201-3-4.7.patch http://xenbits.xen.org/xsa/xsa201-3.patch http://xenbits.xen.org/xsa/advisory-201.html http://www.securityfocus.com/bid/94581 http://www.openwall.com/lists/oss-security/2016/12/05/7 http://www.openwall.com/lists/oss-security/2016/11/29/3 https://security.gentoo.org/glsa/201612-56 http://www.securitytracker.com/id/1037358 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845667

CVE-2016-9817

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect