PT-2016-7212 · Xen+1 · Xen+1

Andrew Cooper · Publicado 2016-09-09 · Atualizado 2024-06-15 · CVE-2016-7094

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Média

Vetor base

AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen versions 4.7.x and earlier

Description A buffer overflow issue allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.

Recommendations For Xen versions 4.7.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-7094

DLA-614-1

DSA-3663-1

MGASA-2017-0012

OPENSUSE-SU-2016_2494-1

OPENSUSE-SU-2016_2497-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2016:2473-1

SUSE-SU-2016:2507-1

SUSE-SU-2016:2528-1

SUSE-SU-2016:2533-1

SUSE-SU-2016:2725-1

Produtos afetados

Suse

Xen

Referências · 281

• https://bugzilla.suse.com/978413 · Nota
• https://suse.com/security/cve/CVE-2014-5149 · Nota
• https://bugzilla.suse.com/995789 · Nota
• https://suse.com/security/cve/CVE-2016-4020 · Nota
• https://suse.com/security/cve/CVE-2016-1922 · Nota
• https://bugzilla.suse.com/975907 · Nota
• https://bugzilla.suse.com/984981 · Nota
• https://bugzilla.suse.com/975138 · Nota
• https://suse.com/security/cve/CVE-2012-5525 · Nota
• https://suse.com/security/cve/CVE-2015-7971 · Nota
• https://suse.com/security/cve/CVE-2014-3124 · Nota
• https://suse.com/security/cve/CVE-2015-3456 · Nota
• https://suse.com/security/cve/CVE-2012-5511 · Nota
• https://suse.com/security/cve/CVE-2015-4104 · Nota
• https://suse.com/security/cve/CVE-2013-1922 · Nota