PT-2017-10095 · Amd+2 · Xen+2

Andrew Cooper

·

Publicado

2016-11-25

·

Atualizado

2024-06-15

·

CVE-2016-9377

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Xen versions 4.5.x through 4.7.x
Description The issue allows local HVM guest OS users to cause a denial of service, resulting in a guest crash, by leveraging IDT entry miscalculation when emulating instructions that generate software interrupts on AMD systems without the NRip feature.
Recommendations For Xen versions 4.5.x through 4.7.x, consider disabling emulation of instructions that generate software interrupts as a temporary workaround until a patch is available. Restrict access to the IDT entry to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-682

Identificadores relacionados

ALT-PU-2016-2364
CVE-2016-9377
MGASA-2017-0012
OPENSUSE-SU-2016_3134-1
OPENSUSE-SU-2017_0007-1
OPENSUSE-SU-2024:11520-1
SUSE-SU-2016:3067-1
SUSE-SU-2016:3083-1

Produtos afetados

Alt Linux
Suse
Xen