CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.6
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: buffer overflow in hw/pt-msi.c in xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 hvm guest administrators to gain privileges by leveraging a system with access to a passed-through msi-x capable physical pci device and msi-x table entries, related to a "write path."
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-04-14
Last Modified Date: 2017-07-01