Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Sep 20, 2017 | Jan 23, 2017 |
| Debian | — | Upgrade xen | Mar 31, 2017 | Nov 24, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 4, 2016 | Dec 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Jan 23, 2017 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade xen-doc-htmlUpgrade xen-kmp-traceUpgrade qemu-ui-spice-coreUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-microvmUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-kvmUpgrade xen-libs-32bitUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade xenUpgrade qemu-s390xUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade xen-tools-domuUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade qemuUpgrade xen-toolsUpgrade xen-doc-pdfUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemu-guest-agentUpgrade xen-kmp-paeUpgrade qemu-ui-spice-appUpgrade xen-libs | Dec 9, 2016 | Dec 7, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-arm | Apr 21, 2017 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub