FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
49211361-ba4d-11e6-ae1b-002590263bf5xen-kernel -- x86: Mishandling of instruction pointer truncation during emulation

The Xen Project reports:

When emulating HVM instructions, Xen uses a small i-cache for fetches from guest memory. The code that handles cache misses does not check if the address from which it fetched lies within the cache before blindly writing to it. As such it is possible for the guest to overwrite hypervisor memory.

It is currently believed that the only way to trigger this bug is to use the way that Xen currently incorrectly wraps CS:IP in 16 bit modes. The included patch prevents such wrapping.

A malicious HVM guest administrator can escalate their privilege to that of the host.


Discovery 2016-09-08
Entry 2016-12-04
xen-kernel
eq 4.5.3

eq 4.6.3

ge 4.7.0 lt 4.7.1

CVE-2016-7093
ports/214936
https://xenbits.xen.org/xsa/advisory-186.html