VULNERABILITY INTELLIGENCE
CVE-2016-9637
CVSS score7.5 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2017-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.