CVE

Id
93912  
CVE No.
CVE-2016-7092  
Status
Candidate  
Description
The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.  
Phase
Assigned (20160825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794781 93912 CVE-2016-7092 CONFIRM:http://support.citrix.com/article/CTX216071  View
794782 93912 CVE-2016-7092 CONFIRM:http://xenbits.xen.org/xsa/advisory-185.html  View
794783 93912 CVE-2016-7092 CONFIRM:http://xenbits.xen.org/xsa/xsa185.patch  View
794784 93912 CVE-2016-7092 CONFIRM:http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
794785 93912 CVE-2016-7092 DEBIAN:DSA-3663  View
794786 93912 CVE-2016-7092 URL:http://www.debian.org/security/2016/dsa-3663  View
794787 93912 CVE-2016-7092 BID:92862  View
794788 93912 CVE-2016-7092 URL:http://www.securityfocus.com/bid/92862  View
794789 93912 CVE-2016-7092 SECTRACK:1036751  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4313 JVNDB-2016-005086 PHP 用 ADOdb ライブラリの PDO ドライバの qstr メソッドにおける SQL インジェクション攻撃を実行される脆弱性 PHP 用 ADOdb ライブラリの PDO ドライバの qstr メソッドには、SQL インジェクション攻撃を実行される脆弱性が存在します。 CVE-2016-7405 93912 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005086.html  View