CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 5.2
CWE Name:  Permissions Privileges and Access Controls
Summary: xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2013-12-24
Last Modified Date: 2017-01-07