CVE-2016-7092 in Xen

Sumário

de MITRE

The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 25/08/2016
• Divulgação: 21/09/2016
• Moderação: aceite
• Entrada: VDB-91386
• CPE: pronto
• CWE: CWE-264 (confirmado)
• CVSS: 8.2 (NVD)
• EPSS: 0.00402
• KEV: não
• Atividades: muito baixo
• Sector: Pharma, Hospital, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-7092
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-7092
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-7092/