CVE-2016-9383 Information

Description

Xen when running on a 64-bit hypervisor allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information cause a denial of service (host crash) or execute arbitrary code on the host by leveraging broken emulation of bit test instructions.

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Reference

http://www.securityfocus.com/bid/94474 http://www.securitytracker.com/id/1037346 http://xenbits.xen.org/xsa/advisory-195.html https://security.gentoo.org/glsa/201612-56 https://support.citrix.com/article/CTX218775

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

CHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8