VYPR
High severity7.5NVD Advisory· Published Jan 23, 2017· Updated May 13, 2026

CVE-2016-9381

CVE-2016-9381

Description

Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.

Affected products

6
  • cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*
  • QEMU/Qemu2 versions
    cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*range: <=2.7.1
    • cpe:2.3:a:qemu:qemu:2.8.0:rc0:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.