VDB

DEBIAN-CVE-2016-9637

DEBIAN-CVE-2016-9637 PUBLISHED CVSS 7.5 HIGH

The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.

Risk Scores

CVSS v3.0
7.5
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:12xen0, 0, 0
Debian:11xen0, 0, 0
Debian:14xen0, 0, 0
Debian:13xen0, 0, 0

Timeline

  • Feb 17, 2017 CVE Published
  • Apr 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›