(RHSA-2016:2963) Important: xen security update

2016-12-2000:00:00

access.redhat.com

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.2%

JSON

Xen is a virtual machine monitor

Security Fix(es):

An out of bounds array access issue was found in the Xen virtual machine
monitor, built with the QEMU ioport support. It could occur while doing ioport
read/write operations, if guest was to supply a 32bit address parameter. A
privileged guest user/process could use this flaw to potentially escalate their
privileges on a host. (CVE-2016-9637)

Red Hat would like to thank the Xen project for reporting this issue.

OSVersionArchitecturePackageVersionFilename
RedHat5x86_64xen-debuginfo< 3.0.3-148.el5_11xen-debuginfo-3.0.3-148.el5_11.x86_64.rpm
RedHat5i386xen-debuginfo< 3.0.3-148.el5_11xen-debuginfo-3.0.3-148.el5_11.i386.rpm
RedHat5i386xen-libs< 3.0.3-148.el5_11xen-libs-3.0.3-148.el5_11.i386.rpm
RedHat5ia64xen-libs< 3.0.3-148.el5_11xen-libs-3.0.3-148.el5_11.ia64.rpm
RedHat5x86_64xen-devel< 3.0.3-148.el5_11xen-devel-3.0.3-148.el5_11.x86_64.rpm
RedHat5i386xen< 3.0.3-148.el5_11xen-3.0.3-148.el5_11.i386.rpm
RedHat5ia64xen-debuginfo< 3.0.3-148.el5_11xen-debuginfo-3.0.3-148.el5_11.ia64.rpm
RedHat5ia64xen-devel< 3.0.3-148.el5_11xen-devel-3.0.3-148.el5_11.ia64.rpm
RedHat5ia64xen< 3.0.3-148.el5_11xen-3.0.3-148.el5_11.ia64.rpm
RedHat5x86_64xen< 3.0.3-148.el5_11xen-3.0.3-148.el5_11.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	x86_64	xen-debuginfo	< 3.0.3-148.el5_11	xen-debuginfo-3.0.3-148.el5_11.x86_64.rpm
RedHat	5	i386	xen-debuginfo	< 3.0.3-148.el5_11	xen-debuginfo-3.0.3-148.el5_11.i386.rpm
RedHat	5	i386	xen-libs	< 3.0.3-148.el5_11	xen-libs-3.0.3-148.el5_11.i386.rpm
RedHat	5	ia64	xen-libs	< 3.0.3-148.el5_11	xen-libs-3.0.3-148.el5_11.ia64.rpm
RedHat	5	x86_64	xen-devel	< 3.0.3-148.el5_11	xen-devel-3.0.3-148.el5_11.x86_64.rpm
RedHat	5	i386	xen	< 3.0.3-148.el5_11	xen-3.0.3-148.el5_11.i386.rpm
RedHat	5	ia64	xen-debuginfo	< 3.0.3-148.el5_11	xen-debuginfo-3.0.3-148.el5_11.ia64.rpm
RedHat	5	ia64	xen-devel	< 3.0.3-148.el5_11	xen-devel-3.0.3-148.el5_11.ia64.rpm
RedHat	5	ia64	xen	< 3.0.3-148.el5_11	xen-3.0.3-148.el5_11.ia64.rpm
RedHat	5	x86_64	xen	< 3.0.3-148.el5_11	xen-3.0.3-148.el5_11.x86_64.rpm