Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-9385

Fixed in a distro release EPSS <1%

The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks.

Published 2017-01-23 · CVE record · OSV

Products: xen, citrix xenserver

Distro releases

ReleasePackageFixed in
Alpine 3.10xen4.7.1-r1
Alpine 3.11xen4.7.1-r1
Alpine 3.12xen4.7.1-r1
Alpine 3.13xen4.7.1-r1
Alpine 3.14xen4.7.1-r1
Alpine 3.15xen4.7.1-r1
Alpine 3.16xen4.7.1-r1
Alpine 3.17xen4.7.1-r1
Alpine 3.18xen4.7.1-r1
Alpine 3.19xen4.7.1-r1
Alpine 3.20xen4.7.1-r1
Alpine 3.21xen4.7.1-r1
Alpine 3.22xen4.7.1-r1
Alpine 3.23xen4.7.1-r1
Alpine 3.24xen4.7.1-r1
Alpine 3.5xen4.7.1-r1
Alpine 3.6xen4.7.1-r1
Alpine 3.7xen4.7.1-r1
Alpine 3.8xen4.7.1-r1
Alpine 3.9xen4.7.1-r1
Debian 12xen4.8.0-1
Debian 13xen4.8.0-1
Debian 14xen4.8.0-1
Debian 8xen4.4.1-9+deb8u8
SUSE Linux Enterprise Desktop 12 SP1xen4.5.5_02-22.3.1
SUSE Linux Enterprise Desktop 12 SP2xen4.7.1_02-25.1
SUSE Linux Enterprise Server 11 SP4xen4.4.4_10-43.5
SUSE Linux Enterprise Server 12 SP1xen4.5.5_02-22.3.1
SUSE Linux Enterprise Server 12 SP2xen4.7.1_02-25.1
SUSE Linux Enterprise Server 12-LTSSxen4.4.4_05-22.25.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4xen4.4.4_10-43.5
SUSE Linux Enterprise Server for SAP Applications 12xen4.4.4_05-22.25.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1xen4.5.5_02-22.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2xen4.7.1_02-25.1
SUSE Linux Enterprise Software Development Kit 11 SP4xen4.4.4_10-43.5
SUSE Linux Enterprise Software Development Kit 12 SP1xen4.5.5_02-22.3.1
SUSE Linux Enterprise Software Development Kit 12 SP2xen4.7.1_02-25.1
Ubuntu 14.04 LTSxen4.4.2-0ubuntu0.14.04.9
Ubuntu 16.04 LTSxen4.6.0-1ubuntu4.3
openSUSE Tumbleweedxen4.15.1_01-1.2