CVE-2016-7093

HIGH

Xen 4.5.3, 4.6.3, and 4.7.x - Memory Corruption via Instruction Pointer Truncation

Title source: llm
STIX 2.1

Description

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.

References (6)

Core 6
Core References
Patch, Vendor Advisory x_refsource_confirm
http://xenbits.xen.org/xsa/advisory-186.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92865
Third Party Advisory x_refsource_confirm
http://support.citrix.com/article/CTX216071
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036752
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201611-09

Scores

CVSS v3 8.2
EPSS 0.0006
EPSS Percentile 18.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (3)
xen/xen 4.5.3
xen/xen 4.6.3
xen/xen 4.7.0
Published Sep 21, 2016
Tracked Since Feb 18, 2026