Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Sep 20, 2017 | Jan 23, 2017 |
| Debian | — | Upgrade xen | Mar 31, 2017 | Nov 24, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 4, 2016 | Dec 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jan 23, 2017 |
| Suse | — | Upgrade qemu-block-sshUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-audio-spiceUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-guest-agentUpgrade xen-toolsUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-armUpgrade xen-kmp-paeUpgrade xen-doc-pdfUpgrade xen-libsUpgrade qemu-ipxeUpgrade xen-develUpgrade qemu-ppcUpgrade xen-kmp-traceUpgrade qemu-audio-alsaUpgrade qemu-chardev-spiceUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade xen-tools-domUUpgrade qemu-s390xUpgrade qemu-toolsUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade xenUpgrade xen-libs-32bitUpgrade qemu-s390Upgrade qemu-ksm | Dec 9, 2016 | Dec 7, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-s390x | Apr 21, 2017 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub