Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-9386 →
DEBIAN-CVE-2016-9386
The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain p...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-1"}]}]
Debian:13
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-1"}]}]
Debian:14
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-1"}]}]
Références
- advisory security-tracker.debian.org