PT-2017-10099 · Xen+3 · Qemu+3

Yanghongke

·

Published

2016-12-07

·

Updated

2024-06-15

·

CVE-2016-9381

CVSS v3.1

7.5

High

VectorAV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions QEMU in Xen (affected versions not specified)
Description A race condition exists, allowing local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings. This issue is related to a "double fetch" vulnerability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2017-1043
CVE-2016-9381
DLA-720-1
MGASA-2017-0012
OPENSUSE-SU-2016_3134-1
OPENSUSE-SU-2017_0007-1
OPENSUSE-SU-2017_0008-1
OPENSUSE-SU-2017_0194-1
OPENSUSE-SU-2024:11520-1
SUSE-SU-2016:3044-1
SUSE-SU-2016:3067-1
SUSE-SU-2016:3083-1
SUSE-SU-2016:3156-1
SUSE-SU-2016:3174-1
SUSE-SU-2016:3273-1
SUSE-SU-2017:0127-1
USN-3261-1

Affected Products

Alt Linux
Qemu
Suse
Ubuntu