CVE-2016-9382

Description

Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.124

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Citrix XenCenter 6.0.2	Windows
Multiple Vulnerabilities are affected in Citrix XenCenter 6.2.0	Windows
Multiple Vulnerabilities are affected in Citrix XenCenter 6.5	Windows
Multiple Vulnerabilities are affected in Citrix XenCenter 7.0	Windows
CVE-2016-9382	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234