CVE-2016-7092

🗓️ 21 Sep 2016 00:00:00Reported by ubuntu.comType

The get_page_from_l3e function in Xen allows privilege escalation via L3 recursive pagetable

Reporter	Title	Published	Views	Family All 61
Prion	Design/Logic Flaw	21 Sep 201614:25	–	prion
CVE	CVE-2016-7092	21 Sep 201614:25	–	cve
Tenable Nessus	FreeBSD : xen-kernel -- x86: Disallow L3 recursive pagetable for 32-bit PV guests (45ca25b5-ba4d-11e6-ae1b-002590263bf5)	5 Dec 201600:00	–	nessus
Tenable Nessus	OracleVM 3.3 : xen (OVMSA-2016-0103)	9 Sep 201600:00	–	nessus
Tenable Nessus	Debian DLA-614-1 : xen security update	12 Sep 201600:00	–	nessus
Tenable Nessus	OracleVM 3.2 : xen (OVMSA-2016-0104)	9 Sep 201600:00	–	nessus
Tenable Nessus	Fedora 23 : xen (2016-1c3374bcb9)	22 Sep 201600:00	–	nessus
Tenable Nessus	Fedora 24 : xen (2016-7d2c67d1f5)	15 Sep 201600:00	–	nessus
Tenable Nessus	OracleVM 3.4 : xen (OVMSA-2016-0102)	9 Sep 201600:00	–	nessus
Tenable Nessus	Fedora 25 : xen (2016-1d8429b89f)	15 Nov 201600:00	–	nessus

Source	Link
xenbits	www.xenbits.xen.org/xsa/advisory-185.html
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-7092
launchpad	www.launchpad.net/bugs/cve/CVE-2016-7092
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-7092

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	12.04	noarch	xen	4.1.6.1-0ubuntu0.12.04.12	UNKNOWN
ubuntu	14.04	noarch	xen	4.4.2-0ubuntu0.14.04.7	UNKNOWN
ubuntu	16.04	noarch	xen	4.6.0-1ubuntu4.2	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Sep 2016 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS26.8

CVSS38.2

EPSS0.001