Candidate: CVE-2016-7094 PublicDate: 2016-09-21 14:25:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7094 http://xenbits.xen.org/xsa/advisory-187.html Description: Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Andrew Cooper Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H [4.1 MEDIUM] Patches_xen: Tags_xen: universe-binary upstream_xen: needed precise_xen: released (4.1.6.1-0ubuntu0.12.04.12) trusty_xen: released (4.4.2-0ubuntu0.14.04.7) trusty/esm_xen: DNE (trusty was released [4.4.2-0ubuntu0.14.04.7]) vivid/ubuntu-core_xen: DNE vivid/stable-phone-overlay_xen: DNE xenial_xen: released (4.6.0-1ubuntu4.2) esm-infra/xenial_xen: released (4.6.0-1ubuntu4.2) devel_xen: released (4.7.0-0ubuntu2)