CVE-2016-9637
EUVD-2016-1043917.02.2017, 02:59
The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| citrix | xenserver | 6.0.2 |
| citrix | xenserver | 6.2.0:sp1 |
| citrix | xenserver | 6.5:sp1 |
| citrix | xenserver | 7.0 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| qemu |
| ||||||||||
| xen |
|
Ubuntu Releases
Common Weakness Enumeration
References