Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2016-9381 — HIGH severity vulnerability | Release Alert

CVE-2016-9381

7.5

HIGHCVSS v3

Published

January 23, 2017

CVSS v2

6.9 MEDIUM

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.

qemu-project/qemu

GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

<= 2.7.1, = 2.8.0NVD

qemu/qemu

GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.

<= 2.7.1, = 2.8.0NVD

More on this CVE

NVD↗GitHub Advisory↗

bonzini/qemu

GitHubMy QEMU tree

<= 2.7.1, = 2.8.0NVD

birkelund/qemu

<= 2.7.1, = 2.8.0NVD

thuth/qemu

GitLabQEMU mirror for GitLab CI: Please see http://wiki.qemu.org/Contribute/SubmitAPatch for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

<= 2.7.1, = 2.8.0NVD