Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2016-9386 PUBLISHED CVSS 7.800000190734863 HIGH

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.7xen4.7.1-r0, 4.7.0-r5, 4.7.0-r4
Alpine:v3.23xen4.7.1-r0, 0, 4.0.1-r0
Alpine:v3.21xen4.7.1-r0, 0, 4.0.1-r0
Alpine:v3.12xen0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.20xen4.7.1-r0, 4.7.0-r5, 4.7.0-r4
Alpine:v3.22xen4.7.1-r0, 0, 4.0.1-r0
Alpine:v3.9xen4.7.1-r0, 0, 4.0.1-r0
Alpine:v3.5xen4.7.1-r0, 0, 4.0.1-r0
Alpine:v3.8xen4.7.1-r0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.10xen0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.16xen4.7.1-r0, 0, 4.0.1-r0
Alpine:v3.17xen4.7.1-r0, 4.7.0-r5, 4.7.0-r4
Alpine:v3.19xen4.7.1-r0, 4.7.0-r5, 4.7.0-r4
Alpine:v3.13xen4.7.1-r0, 0, 4.0.1-r0
Alpine:v3.18xen0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.14xen4.7.1-r0, 4.7.1-r0, 4.7.0-r5
Alpine:v3.6xen4.7.1-r0, 4.7.0-r5, 4.7.0-r4
Alpine:v3.15xen4.3.0-r0, 0, 4.0.1-r0
Alpine:v3.11xen4.7.1-r0, 4.7.0-r5, 0

Timeline

References

Open in Interactive Console →