{
  "schema_version": "1.4.0",
  "id": "GHSA-f8fq-24rx-53q7",
  "modified": "2022-05-17T02:37:09Z",
  "published": "2022-05-17T02:37:09Z",
  "aliases": [
    "CVE-2016-7093"
  ],
  "details": "Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"
    }
  ],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7093"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201611-09"
    },
    {
      "type": "WEB",
      "url": "http://support.citrix.com/article/CTX216071"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/92865"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1036752"
    },
    {
      "type": "WEB",
      "url": "http://xenbits.xen.org/xsa/advisory-186.html"
    },
    {
      "type": "WEB",
      "url": "http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2016-09-21T14:25:00Z"
  }
}