CVE-2016-7093
First published: Wed Sep 21 2016(Updated: )
Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xen xen-unstable | =4.5.3 | |
| Xen xen-unstable | =4.6.3 | |
| Xen xen-unstable | =4.7.0 |
Remedy
http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://support.citrix.com/article/CTX216071
- http://www.securityfocus.com/bid/92865
- http://www.securitytracker.com/id/1036752
- http://xenbits.xen.org/xsa/advisory-186.html
- http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch
- https://security.gentoo.org/glsa/201611-09
Frequently Asked Questions
What is the severity of CVE-2016-7093?
CVE-2016-7093 has a high severity rating due to the potential for local HVM guest OS administrators to gain host OS privileges.
How do I fix CVE-2016-7093?
To fix CVE-2016-7093, it is recommended to upgrade your Xen hypervisor to a version that is not affected by this vulnerability.
What systems are affected by CVE-2016-7093?
CVE-2016-7093 affects Xen versions 4.5.3, 4.6.3, and 4.7.0.
What type of vulnerability is CVE-2016-7093?
CVE-2016-7093 is a privilege escalation vulnerability caused by mishandling of instruction pointer truncation.
Who can exploit CVE-2016-7093?
Local HVM guest OS administrators can exploit CVE-2016-7093 to overwrite hypervisor memory and gain elevated privileges.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/xen
- canonical/xen xen-unstable
- version/xen xen-unstable/4.5.3
- version/xen xen-unstable/4.6.3
- version/xen xen-unstable/4.7.0