Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at HYP.
References
Link | Resource |
---|---|
http://xenbits.xen.org/xsa/xsa201-4.patch | Patch Vendor Advisory |
http://xenbits.xen.org/xsa/advisory-201.html | Mitigation Patch Vendor Advisory |
http://www.securityfocus.com/bid/94581 | Third Party Advisory VDB Entry |
http://www.openwall.com/lists/oss-security/2016/12/05/7 | Mailing List Third Party Advisory |
http://www.openwall.com/lists/oss-security/2016/11/29/3 | Mailing List Mitigation Third Party Advisory |
https://security.gentoo.org/glsa/201612-56 | |
http://www.securitytracker.com/id/1037358 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2017-02-27 14:59
Updated : 2017-07-27 18:29
NVD link : CVE-2016-9818
Mitre link : CVE-2016-9818
JSON object : View
CWE
CWE-284
Improper Access Control
Products Affected
xen
- xen