VDB

DEBIAN-CVE-2016-9386

DEBIAN-CVE-2016-9386 PUBLISHED CVSS 7.800000190734863 HIGH

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:12xen0, 0, 0
Debian:11xen0, 0, 0
Debian:14xen0, 0, 0
Debian:13xen0, 0, 0

Timeline

  • Jan 23, 2017 CVE Published
  • Apr 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›