CVE-2016-7093

Published: Sep 21, 2016Modified: May 6, 2026

8.2

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: NVD

Description

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.

Affected (3)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.5.3
Xen Xen	Version 4.6.3
Xen Xen	Version 4.7.0

Related CWEs

CWE-264

References (12)

http://support.citrix.com/article/CTX216071

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/92865

Source: cve@mitre.org

http://www.securitytracker.com/id/1036752

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://xenbits.xen.org/xsa/advisory-186.html

Source: cve@mitre.org

PatchVendor Advisory

http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch

Source: cve@mitre.org

PatchVendor Advisory

https://security.gentoo.org/glsa/201611-09

Source: cve@mitre.org

http://support.citrix.com/article/CTX216071