CVE-2016-4962
07.06.2016, 14:06
The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore.Enginsight
| Vendor | Product | Version |
|---|---|---|
| oracle | vm_server | 3.3 |
| oracle | vm_server | 3.4 |
| xen | xen | 4.3.0 |
| xen | xen | 4.3.1 |
| xen | xen | 4.3.2 |
| xen | xen | 4.3.3 |
| xen | xen | 4.3.4 |
| xen | xen | 4.4.0 |
| xen | xen | 4.4.0:rc1 |
| xen | xen | 4.4.1 |
| xen | xen | 4.4.2 |
| xen | xen | 4.4.3 |
| xen | xen | 4.4.4 |
| xen | xen | 4.5.0 |
| xen | xen | 4.5.1 |
| xen | xen | 4.5.2 |
| xen | xen | 4.5.3 |
| xen | xen | 4.6.0 |
| xen | xen | 4.6.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References