CVE-2016-4962 in Xen

الملخص

بحسب MITRE

The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 24/05/2016
• إفشاء: 07/06/2016
• الاعتدال: تمت الموافقة
• إدخال: VDB-87720
• CPE: جاهز
• CWE: CWE-264 (مؤكد)
• CVSS: 6.7 (NVD)
• EPSS: 0.00089
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hospital, Education, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-4962
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-4962
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-4962/