Lucene search
RedHatRHSA-2016:2963HistoryDec 20, 2016 - 12:00 a.m.
(RHSA-2016:2963) Important: xen security update
2016-12-2000:00:00
access.redhat.com
36
0.001 Low
EPSS
Percentile
26.7%
Xen is a virtual machine monitor
Security Fix(es):
- An out of bounds array access issue was found in the Xen virtual machine
monitor, built with the QEMU ioport support. It could occur while doing ioport
read/write operations, if guest was to supply a 32bit address parameter. A
privileged guest user/process could use this flaw to potentially escalate their
privileges on a host. (CVE-2016-9637)
Red Hat would like to thank the Xen project for reporting this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 5 | x86_64 | xen-debuginfo | < 3.0.3-148.el5_11 | xen-debuginfo-3.0.3-148.el5_11.x86_64.rpm |
| RedHat | 5 | i386 | xen-debuginfo | < 3.0.3-148.el5_11 | xen-debuginfo-3.0.3-148.el5_11.i386.rpm |
| RedHat | 5 | i386 | xen-libs | < 3.0.3-148.el5_11 | xen-libs-3.0.3-148.el5_11.i386.rpm |
| RedHat | 5 | ia64 | xen-libs | < 3.0.3-148.el5_11 | xen-libs-3.0.3-148.el5_11.ia64.rpm |
| RedHat | 5 | x86_64 | xen-devel | < 3.0.3-148.el5_11 | xen-devel-3.0.3-148.el5_11.x86_64.rpm |
| RedHat | 5 | i386 | xen | < 3.0.3-148.el5_11 | xen-3.0.3-148.el5_11.i386.rpm |
| RedHat | 5 | ia64 | xen-debuginfo | < 3.0.3-148.el5_11 | xen-debuginfo-3.0.3-148.el5_11.ia64.rpm |
| RedHat | 5 | ia64 | xen-devel | < 3.0.3-148.el5_11 | xen-devel-3.0.3-148.el5_11.ia64.rpm |
| RedHat | 5 | ia64 | xen | < 3.0.3-148.el5_11 | xen-3.0.3-148.el5_11.ia64.rpm |
| RedHat | 5 | x86_64 | xen | < 3.0.3-148.el5_11 | xen-3.0.3-148.el5_11.x86_64.rpm |
Related
nessus
nessus
OracleVM 3.3 : xen (OVMSA-2016-0171)
2016-12-08 00:00:00
Citrix XenServer QEMU ioport Array Overflow Guest-to-Host Privilege Escalation (CTX219136)
2016-12-09 00:00:00
RHEL 5 : xen (RHSA-2016:2963)
2016-12-21 00:00:00
ubuntucve
ubuntucve
CVE-2016-9637
2017-02-17 00:00:00
citrix
citrix
CVE-2016-9637 - Citrix XenServer Security Update
2016-12-06 05:00:00
prion
prion
Security feature bypass
2017-02-17 02:59:00
centos
centos
xen security update
2016-12-20 16:58:37
veracode
veracode
Privilege Escalation
2019-01-15 09:15:00
redhatcve
redhatcve
CVE-2016-9637
2016-12-06 13:17:27
debiancve
debiancve
CVE-2016-9637
2017-02-17 02:59:13
openvas
openvas
CentOS Update for xen CESA-2016:2963 centos5
2016-12-21 00:00:00
RedHat Update for xen RHSA-2016:2963-01
2016-12-21 00:00:00
Debian: Security Advisory (DLA-1270-1)
2018-02-20 00:00:00
xen
xen
qemu ioport array overflow
2016-12-06 12:00:00
cve
cve
CVE-2016-9637
2017-02-17 02:59:13
nvd
nvd
CVE-2016-9637
2017-02-17 02:59:13
cvelist
cvelist
CVE-2016-9637
2017-02-16 18:00:00
oraclelinux
oraclelinux
xen security update
2016-12-20 00:00:00
osv
osv
xen - security update
2018-02-06 00:00:00
debian
debian
[SECURITY] [DLA 1270-1] xen security update
2018-02-06 12:35:00
fedora
fedora
[SECURITY] Fedora 23 Update: xen-4.5.5-5.fc23
2016-12-19 01:27:21
[SECURITY] Fedora 24 Update: xen-4.6.4-4.fc24
2016-12-23 13:51:19
suse
suse
Security update for xen (important)
2016-12-27 17:11:00
Security update for xen (important)
2016-12-07 20:07:43
Security update for xen (important)
2016-12-16 16:07:44
gentoo
gentoo
Xen: Multiple vulnerabilities
2016-12-31 00:00:00
mageia
mageia
Updated xen packages fix security vulnerability
2017-01-09 23:29:57