CVE-2016-7093
Fixed in a distro release EPSS <1%
Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | xen | 4.7.0-r1 |
| Alpine 3.11 | xen | 4.7.0-r1 |
| Alpine 3.12 | xen | 4.7.0-r1 |
| Alpine 3.13 | xen | 4.7.0-r1 |
| Alpine 3.14 | xen | 4.7.0-r1 |
| Alpine 3.15 | xen | 4.7.0-r1 |
| Alpine 3.16 | xen | 4.7.0-r1 |
| Alpine 3.17 | xen | 4.7.0-r1 |
| Alpine 3.18 | xen | 4.7.0-r1 |
| Alpine 3.19 | xen | 4.7.0-r1 |
| Alpine 3.20 | xen | 4.7.0-r1 |
| Alpine 3.21 | xen | 4.7.0-r1 |
| Alpine 3.22 | xen | 4.7.0-r1 |
| Alpine 3.23 | xen | 4.7.0-r1 |
| Alpine 3.24 | xen | 4.7.0-r1 |
| Alpine 3.4 | xen | 4.6.3-r2 |
| Alpine 3.5 | xen | 4.7.0-r1 |
| Alpine 3.6 | xen | 4.7.0-r1 |
| Alpine 3.7 | xen | 4.7.0-r1 |
| Alpine 3.8 | xen | 4.7.0-r1 |
| Alpine 3.9 | xen | 4.7.0-r1 |
| SUSE Linux Enterprise Desktop 12 SP1 | xen | 4.5.3_10-20.1 |
| SUSE Linux Enterprise Server 11 SP4 | xen | 4.4.4_08-40.2 |
| SUSE Linux Enterprise Server 12 SP1 | xen | 4.5.3_10-20.1 |
| SUSE Linux Enterprise Server 12-LTSS | xen | 4.4.4_04-22.22.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | xen | 4.4.4_08-40.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 | xen | 4.4.4_04-22.22.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | xen | 4.5.3_10-20.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | xen | 4.4.4_08-40.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | xen | 4.5.3_10-20.1 |
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 |