DEBIAN-CVE-2016-9386

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2016-9386
Published: 23 Jan 2017, 21:59
Last modified:28 Apr 2026, 20:16

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
3.0 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 Jan 2017, 21:59
Published
Vulnerability first disclosed
28 Apr 2026, 20:16
Last Modified
Vulnerability information updated

Description

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.

CVSS Metrics

  • v3.0•HIGH•Score: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

  • debian•xen

    < 4.8.0-1 | < 4.8.0-1 | < 4.8.0-1 | < 4.8.0-1

References (1)