VDB

ALPINE-CVE-2016-9378

ALPINE-CVE-2016-9378 PUBLISHED CVSS 5.5 MEDIUM

Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging an incorrect choice for software interrupt delivery.

Risk Scores

CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.6xen0, 0, 0
Alpine:v3.15xen0, 4.1.2-r4, 4.0.1-r0
Alpine:v3.9xen4.0.1-r2, 4.0.1-r0, 0
Alpine:v3.16xen4.1.2-r11, 0, 4.0.1-r0
Alpine:v3.12xen4.0.1-r3, 4.0.1-r0, 4.0.1-r2
Alpine:v3.18xen4.7.1-r0, 0, 0
Alpine:v3.8xen0, 0, 0
Alpine:v3.23xen0, 4.7.1-r0, 4.7.0-r5
Alpine:v3.10xen4.0.1-r0, 4.1.2-r5, 0
Alpine:v3.17xen0, 0, 4.2.2-r2
Alpine:v3.20xen4.3.2-r4, 4.1.1-r2, 0
Alpine:v3.22xen4.7.1-r0, 4.7.0-r5, 4.7.0-r4
Alpine:v3.21xen4.3.0-r7, 0, 4.0.1-r0
Alpine:v3.13xen4.2.2-r7, 4.7.1-r0, 4.7.0-r5
Alpine:v3.19xen4.7.1-r0, 0, 0
Alpine:v3.11xen0, 0, 4.0.1-r0
Alpine:v3.7xen4.7.1-r0, 0, 0
Alpine:v3.5xen0, 0, 4.1.1-r2
Alpine:v3.14xen4.0.1-r0, 4.0.1-r1, 0
Alpine:v3.24xen0, 0

Timeline

  • Feb 22, 2017 CVE Published
  • Apr 30, 2026 Distribution Patch
  • Jun 9, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›