PT-2016-7210 · Xen+1 · Xen+1

Jérémie Boutoille · Publicado 2016-09-09 · Atualizado 2024-06-15 · CVE-2016-7092

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description The issue allows local 32-bit PV guest OS administrators to gain host OS privileges. This is related to vectors involving L3 recursive pagetables in the get page from l3e function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-7092

DLA-614-1

DSA-3663-1

MGASA-2017-0012

OPENSUSE-SU-2016_2494-1

OPENSUSE-SU-2016_2497-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2016:2473-1

SUSE-SU-2016:2507-1

SUSE-SU-2016:2528-1

SUSE-SU-2016:2533-1

SUSE-SU-2016:2725-1

Produtos afetados

Suse

Xen

Referências · 352

• https://suse.com/security/cve/CVE-2016-6833.html · Nota
• https://suse.com/security/cve/CVE-2016-7094 · Nota
• https://suse.com/security/cve/CVE-2014-3615 · Nota
• https://suse.com/security/cve/CVE-2012-5515 · Nota
• https://suse.com/security/cve/CVE-2015-7972 · Nota
• https://suse.com/security/cve/CVE-2016-3158.html · Nota
• https://suse.com/security/cve/CVE-2016-4480.html · Nota
• https://bugzilla.suse.com/975907 · Nota
• https://bugzilla.suse.com/953339 · Nota
• https://suse.com/security/cve/CVE-2015-8555 · Nota
• https://suse.com/security/cve/CVE-2012-4538 · Nota
• https://xenbits.xen.org/xsa/advisory-172.html · Nota
• https://xenbits.xen.org/xsa/advisory-199.html · Nota
• https://suse.com/security/cve/CVE-2013-4534 · Nota
• https://suse.com/security/cve/CVE-2016-6888 · Nota