CVE-2016-7154

MEDIUM

Xen - Use After Free

Title source: rule

Description

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

References (8)

[Third Party Advisory] http://support.citrix.com/article/CTX216071

[Various Sources] http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf

[Vendor Advisory] http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/92863

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036754

[Patch, Vendor Advisory] http://xenbits.xen.org/xsa/advisory-188.html

[Patch] http://xenbits.xen.org/xsa/xsa188.patch

[Third Party Advisory] http://www.debian.org/security/2016/dsa-3663

Scores

CVSS v3 6.7

EPSS 0.0009

EPSS Percentile 26.4%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-416

Status published

Affected Products (6)

n/a/n/a

xen/xen

xen/xen

xen/xen

xen/xen

xen/xen

Timeline

Published Sep 21, 2016

Tracked Since Feb 18, 2026