CVE-2016-9817

Published: Feb 27, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.0 / Impact: 4.0

Source: NVD

Description

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2.EA bit set.

Affected (2)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.7.0
Xen Xen	Version 4.7.1

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (16)

http://www.openwall.com/lists/oss-security/2016/11/29/3

Source: cve@mitre.org

Mailing ListMitigationThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/05/7

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/94581

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037358

Source: cve@mitre.org

http://xenbits.xen.org/xsa/advisory-201.html

Source: cve@mitre.org

MitigationPatchVendor Advisory

http://xenbits.xen.org/xsa/xsa201-3-4.7.patch

Source: cve@mitre.org

PatchVendor Advisory

http://xenbits.xen.org/xsa/xsa201-3.patch

Source: cve@mitre.org

PatchVendor Advisory

https://security.gentoo.org/glsa/201612-56

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/11/29/3