NVD

Id
21638  
Name
CVE-2016-7092  
Description
The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-09-21  
Modified Date
2017-01-06  
Seq
2016-7092  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
116374 21638 CVE-2016-7092 http://support.citrix.com/article/CTX216071  View
116375 21638 CVE-2016-7092 DSA-3663  View
116376 21638 CVE-2016-7092 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
116377 21638 CVE-2016-7092 92862  View
116378 21638 CVE-2016-7092 1036751  View
116379 21638 CVE-2016-7092 http://xenbits.xen.org/xsa/advisory-185.html  View
116380 21638 CVE-2016-7092 http://xenbits.xen.org/xsa/xsa185.patch  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4055 JVNDB-2016-004828 Xen の arch/x86/mm.c の get_page_from_l3e 関数におけるホスト OS の権限を取得される脆弱性 Xen の arch/x86/mm.c の get_page_from_l3e 関数には、ホスト OS の権限を取得される脆弱性が存在します。 CVE-2016-7092 93599 CVE-2016-7092 21638 6.8 8.2 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004828.html 2016-09-08 2016-09-26 View