CVE-2016-9637 The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors...
HighCVSS 7.5
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xen(Debian:12) | < 4.4.0-1 | 4.4.0-1 |
| debian/xen(Debian:13) | < 4.4.0-1 | 4.4.0-1 |
| debian/xen(Debian:14) | < 4.4.0-1 | 4.4.0-1 |
| citrix xenserver | = 6.0.2 | No fix listed |
| citrix xenserver | = 6.2.0-sp1 | No fix listed |
| citrix xenserver | = 6.5-sp1 | No fix listed |
| citrix xenserver | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2016-9637 vendor-advisory
- RHSA-2016:2963 vendor-advisory
- 94699 vdb-entry
- 1037397 vdb-entry
- xenbits.xen.org
- [debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update mailing-list
- GLSA-201612-56 vendor-advisory
- support.citrix.com