CVE-2016-9385
Publication date 23 January 2017
Last updated 25 August 2025
Ubuntu priority
Description
The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| xen | ||
| 16.04 LTS xenial |
Fixed 4.6.0-1ubuntu4.3
|
|
| 14.04 LTS trusty |
Fixed 4.4.2-0ubuntu0.14.04.9
|
|
Notes
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
6.0 · Medium
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | High |
| User interaction | None |
| Scope | Changed |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H |