PT-2016-6194 · Xen+1 · Xen+1

Wei Liu · Publicado 2016-06-07 · Atualizado 2017-01-09 · CVE-2016-4962

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier

Description The issue allows local OS guest administrators to cause a denial of service or gain host OS privileges by manipulating information in guest-controlled areas of xenstore. This can lead to resource consumption or management facility confusion.

Recommendations For Xen versions 4.6.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-4962

DSA-3633-1

MGASA-2017-0012

OPENSUSE-SU-2016_2494-1

OPENSUSE-SU-2016_2497-1

SUSE-SU-2016:2093-1

SUSE-SU-2016:2100-1

SUSE-SU-2016:2533-1

Produtos afetados

Suse

Xen

Referências · 154

• https://bugzilla.suse.com/978413 · Nota
• https://suse.com/security/cve/CVE-2016-4020 · Nota
• https://bugzilla.suse.com/995789 · Nota
• https://bugzilla.suse.com/975907 · Nota
• https://bugzilla.suse.com/984981 · Nota
• https://osv.dev/vulnerability/CVE-2016-4962 · Aviso do Fabricante
• https://bugzilla.suse.com/975138 · Nota
• https://xenbits.xen.org/xsa/advisory-184.html · Nota
• https://suse.com/security/cve/CVE-2016-4439 · Nota
• https://bugzilla.suse.com/974038 · Nota
• https://bugzilla.suse.com/982026 · Nota
• https://suse.com/security/cve/CVE-2016-5105 · Nota
• https://bugzilla.suse.com/982960 · Nota
• https://bugzilla.suse.com/982286 · Nota
• https://bugzilla.suse.com/973188 · Nota