PT-2017-10229 · Xen+2 · Xen+2

Publicado 2016-12-07 · Atualizado 2024-06-15 · CVE-2016-9637

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description The issue involves the ioport read and ioport write functions in Xen when qemu is used as a device model. It might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-9637

DLA-1270-1

MGASA-2017-0012

OPENSUSE-SU-2016_3134-1

OPENSUSE-SU-2017_0007-1

OPENSUSE-SU-2017_0008-1

OPENSUSE-SU-2024:11520-1

RHSA-2016:2963

RHSA-2016_2963

SUSE-SU-2016:3044-1

SUSE-SU-2016:3067-1

SUSE-SU-2016:3083-1

SUSE-SU-2016:3156-1

SUSE-SU-2016:3174-1

SUSE-SU-2016:3273-1

Produtos afetados

Red Hat

Suse

Xen

Referências · 182

• https://suse.com/security/cve/CVE-2016-10025 · Nota
• https://suse.com/security/cve/CVE-2020-29481 · Nota
• https://suse.com/security/cve/CVE-2020-29570 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-15563 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20163174-1 · Nota
• https://suse.com/security/cve/CVE-2007-3919 · Nota
• https://xenbits.xen.org/xsa/advisory-184.html · Nota
• https://suse.com/security/cve/CVE-2016-9382 · Nota
• https://suse.com/security/cve/CVE-2020-29483 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9637 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-7777 · Nota
• https://bugzilla.suse.com/1003032 · Nota
• https://suse.com/security/cve/CVE-2018-7541 · Nota
• https://xenbits.xen.org/xsa/advisory-187.html · Nota