CVE-2016-9381high
Description
Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.
References
http://www.securityfocus.com/bid/94476
http://www.securitytracker.com/id/1037344
http://xenbits.xen.org/xsa/advisory-197.html
Details
Source: MITRE
Published: 2017-01-23
Updated: 2020-10-23
Type: CWE-362
Risk Information
CVSS v2
Base Score: 6.9
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 3.4
Severity: MEDIUM
CVSS v3
Base Score: 7.5
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Impact Score: 6
Exploitability Score: 0.8
Severity: HIGH