CVE-2016-7154
published 2016-09-21CVE-2016-7154: Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and…
PriorityP426medium6.7CVSS 3.0
AVLACLPRHUINSUCHIHAH
EPSS
0.50%
39.6th percentile
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xen | < xen 4.6.0-1 (bookworm) | xen 4.6.0-1 (bookworm) |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | >= 0 < 4.6.0-1 | 4.6.0-1 |
| xen | xen | >= 0 < 4.6.0-1 | 4.6.0-1 |
| xen | xen | >= 0 < 4.6.0-1 | 4.6.0-1 |
| xen | xen | >= 0 < 4.6.0-1 | 4.6.0-1 |
CVSS provenance
nvdv3.06.7MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv6.7MEDIUM
vendor_debian6.7MEDIUM
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
xen: use after free in FIFO event channel code
vendor_redhat·2016-09-08·CVSS 6.7
CVE-2016-7154 [MEDIUM] xen: use after free in FIFO event channel code
xen: use after free in FIFO event channel code
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
Package: xen (Red Hat Enterprise Linux 5) - Not affected
Debian
CVE-2016-7154: xen - Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows ...
vendor_debian·2016·CVSS 6.7
CVE-2016-7154 [MEDIUM] CVE-2016-7154: xen - Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows ...
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
Scope: local
bookworm: resolved (fixed in 4.6.0-1)
bullseye: resolved (fixed in 4.6.0-1)
forky: resolved (fixed in 4.6.0-1)
sid: resolved (fixed in 4.6.0-1)
trixie: resolved (fixed in 4.6.0-1)
GHSA
GHSA-6m92-fjpm-vf6h: Use-after-free vulnerability in the FIFO event channel code in Xen 4
ghsa_unreviewed·2022-05-17
CVE-2016-7154 [HIGH] CWE-416 GHSA-6m92-fjpm-vf6h: Use-after-free vulnerability in the FIFO event channel code in Xen 4
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
OSV
CVE-2016-7154: Use-after-free vulnerability in the FIFO event channel code in Xen 4
osv·2016-09-21·CVSS 6.7
CVE-2016-7154 [MEDIUM] CVE-2016-7154: Use-after-free vulnerability in the FIFO event channel code in Xen 4
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.
No detection rules found.
No public exploits indexed.
http://support.citrix.com/article/CTX216071http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdfhttp://www.debian.org/security/2016/dsa-3663http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlhttp://www.securityfocus.com/bid/92863http://www.securitytracker.com/id/1036754http://xenbits.xen.org/xsa/advisory-188.htmlhttp://xenbits.xen.org/xsa/xsa188.patchhttp://support.citrix.com/article/CTX216071http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdfhttp://www.debian.org/security/2016/dsa-3663http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlhttp://www.securityfocus.com/bid/92863http://www.securitytracker.com/id/1036754http://xenbits.xen.org/xsa/advisory-188.htmlhttp://xenbits.xen.org/xsa/xsa188.patch
2016-09-21
Published