PT-2016-6195 · Citrix+1 · Xen+1

Wei Liu · Publicado 2016-06-07 · Atualizado 2018-09-07 · CVE-2016-4963

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.7

Description The issue allows local guest OS users with access to the driver domain to cause a denial of service by manipulating information in the backend directories in xenstore. This can lead to management tool confusion.

Recommendations For versions prior to 4.7, update to version 4.7 or later to resolve the issue.

Correção

DoS

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-4963

DLA-1493-1

MGASA-2017-0012

OPENSUSE-SU-2016_2494-1

OPENSUSE-SU-2016_2497-1

SUSE-SU-2016:2093-1

SUSE-SU-2016:2100-1

SUSE-SU-2016:2533-1

Produtos afetados

Suse

Xen

Referências · 152

• https://bugzilla.suse.com/978413 · Nota
• https://suse.com/security/cve/CVE-2016-4020 · Nota
• https://bugzilla.suse.com/995789 · Nota
• https://bugzilla.suse.com/975907 · Nota
• https://bugzilla.suse.com/984981 · Nota
• https://ubuntu.com/security/CVE-2016-4963 · Aviso do Fabricante
• https://bugzilla.suse.com/975138 · Nota
• https://security-tracker.debian.org/tracker/CVE-2016-4963 · Aviso do Fabricante
• https://xenbits.xen.org/xsa/advisory-184.html · Nota
• http://securitytracker.com/id/1036024 · Nota
• https://suse.com/security/cve/CVE-2016-4439 · Nota
• https://bugzilla.suse.com/974038 · Nota
• https://bugzilla.suse.com/982026 · Nota
• https://suse.com/security/cve/CVE-2016-5105 · Nota
• https://bugzilla.suse.com/982960 · Nota