PT-2017-10099 · Xen+3 · Qemu+3

Yanghongke · Publicado 2016-12-07 · Atualizado 2024-06-15 · CVE-2016-9381

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QEMU in Xen (affected versions not specified)

Description A race condition exists, allowing local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings. This issue is related to a "double fetch" vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALT-PU-2017-1043

CVE-2016-9381

DLA-720-1

MGASA-2017-0012

OPENSUSE-SU-2016_3134-1

OPENSUSE-SU-2017_0007-1

OPENSUSE-SU-2017_0008-1

OPENSUSE-SU-2017_0194-1

OPENSUSE-SU-2024:11520-1

SUSE-SU-2016:3044-1

SUSE-SU-2016:3067-1

SUSE-SU-2016:3083-1

SUSE-SU-2016:3156-1

SUSE-SU-2016:3174-1

SUSE-SU-2016:3273-1

SUSE-SU-2017:0127-1

USN-3261-1

Produtos afetados

Alt Linux

Qemu

Suse

Ubuntu

Referências · 405

• https://bugzilla.suse.com/1013285 · Nota
• https://ubuntu.com/security/CVE-2016-9915 · Aviso do Fabricante
• https://bugzilla.suse.com/1013341 · Nota
• https://bugzilla.suse.com/1014112 · Nota
• https://suse.com/security/cve/CVE-2017-12135 · Nota
• https://bdu.fstec.ru/vul/2017-00074 · Nota de Segurança
• https://lists.opensuse.org/archives/list/[e-mail]/thread/TD6VBHSNLJ6X342Z72W5MYWRKDXWA37Q · Nota
• https://suse.com/security/cve/CVE-2018-7541 · Nota
• https://bugzilla.suse.com/1004981 · Nota
• https://suse.com/security/cve/CVE-2020-11739 · Nota
• https://suse.com/security/cve/CVE-2016-9101.html · Nota
• http://xenbits.xen.org/xsa/advisory-197.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577 · Nota de Segurança
• https://suse.com/security/cve/CVE-2020-0543 · Nota
• https://bdu.fstec.ru/vul/2017-01607 · Nota de Segurança