Description (CNA)
Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://xenbits.xen.org/xsa/advisory-186.html
- http://www.securityfocus.com/bid/92865
- http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch
- http://support.citrix.com/article/CTX216071
- http://www.securitytracker.com/id/1036752
- https://security.gentoo.org/glsa/201611-09
ADP enrichment
No English description supplied.
- http://xenbits.xen.org/xsa/advisory-186.html
- http://www.securityfocus.com/bid/92865
- http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch
- http://support.citrix.com/article/CTX216071
- http://www.securitytracker.com/id/1036752
- https://security.gentoo.org/glsa/201611-09