CVE-2016-9383

Description

Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execute arbitrary code on the host by leveraging broken emulation of bit test instructions.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.135

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Citrix XenCenter 6.0.2	Windows
Multiple Vulnerabilities are affected in Citrix XenCenter 6.2.0	Windows
Multiple Vulnerabilities are affected in Citrix XenCenter 6.5	Windows
Multiple Vulnerabilities are affected in Citrix XenCenter 7.0	Windows
Improper Input Validation Vulnerability (CVE-2016-9383)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234