Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Sep 20, 2017 | Jan 23, 2017 |
| Debian | — | Upgrade xen | Mar 31, 2017 | Nov 24, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 4, 2016 | Dec 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Jan 23, 2017 |
| Suse | — | Upgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade xen-tools-xendomains-wait-diskUpgrade xen-tools-domuUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade xen-develUpgrade qemu-skibootUpgrade xen-kmp-paeUpgrade xen-doc-pdfUpgrade qemu-ipxeUpgrade qemu-langUpgrade xen-toolsUpgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-seabiosUpgrade qemu-hw-display-qxlUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade xen-doc-htmlUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-toolsUpgrade xen-kmp-traceUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade xenUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-ui-cursesUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-s390 | Dec 9, 2016 | Dec 7, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-s390x | Apr 21, 2017 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub