VDB
ALPINE-CVE-2016-9377
ALPINE-CVE-2016-9377
PUBLISHED
CVSS 5.5 MEDIUM
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.20 | xen | 0, 4.7.1-r0, 4.7.0-r5 |
| Alpine:v3.18 | xen | 4.5.1-r2, 0, 4.7.1-r0 |
| Alpine:v3.22 | xen | 0, 0, 4.7.1-r0 |
| Alpine:v3.12 | xen | 4.0.1-r1, 0, 0 |
| Alpine:v3.9 | xen | 0, 0, 0 |
| Alpine:v3.17 | xen | 4.0.1-r0, 0, 4.7.1-r0 |
| Alpine:v3.7 | xen | 4.3.0-r7, 0, 0 |
| Alpine:v3.21 | xen | 0, 0, 4.0.1-r0 |
| Alpine:v3.10 | xen | 4.2.1-r7, 0, 4.0.1-r0 |
| Alpine:v3.11 | xen | 4.0.1-r0, 0, 0 |
| Alpine:v3.15 | xen | 0, 0, 4.7.1-r0 |
| Alpine:v3.8 | xen | 4.2.2-r8, 0, 4.0.1-r0 |
| Alpine:v3.14 | xen | 4.0.1-r3, 4.1.0-r1, 4.3.0-r8 |
| Alpine:v3.13 | xen | 4.0.1-r3, 4.0.1-r0, 0 |
| Alpine:v3.19 | xen | 4.0.1-r0, 0, 0 |
| Alpine:v3.24 | xen | 0, 0 |
| Alpine:v3.6 | xen | 4.1.2-r12, 4.0.1-r0, 0 |
| Alpine:v3.23 | xen | 4.0.1-r0, 4.0.1-r2, 4.0.1-r3 |
| Alpine:v3.5 | xen | 4.0.1-r2, 0, 0 |
| Alpine:v3.16 | xen | 0, 4.0.1-r1, 0 |
Timeline
- Feb 22, 2017 CVE Published
- Apr 30, 2026 Distribution Patch
- Jun 9, 2026 CVE Updated