Vulnerability Details CVE-2016-9377
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.3%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
References
- http://www.securityfocus.com/bid/94475
- http://www.securitytracker.com/id/1037345
- http://xenbits.xen.org/xsa/advisory-196.html
- https://security.gentoo.org/glsa/201612-56
- http://www.securityfocus.com/bid/94475
- http://www.securitytracker.com/id/1037345
- http://xenbits.xen.org/xsa/advisory-196.html
- https://security.gentoo.org/glsa/201612-56
Products affected by CVE-2016-9377
-
cpe:2.3:o:xen:xen:4.5.0
-
cpe:2.3:o:xen:xen:4.5.1
-
cpe:2.3:o:xen:xen:4.5.2
-
cpe:2.3:o:xen:xen:4.5.3
-
cpe:2.3:o:xen:xen:4.5.5
-
cpe:2.3:o:xen:xen:4.6.0
-
cpe:2.3:o:xen:xen:4.6.1
-
cpe:2.3:o:xen:xen:4.6.3
-
cpe:2.3:o:xen:xen:4.6.4
-
cpe:2.3:o:xen:xen:4.7.0
-
cpe:2.3:o:xen:xen:4.7.1