Vulnerability Database

300,826

Total vulnerabilities in the database

CVE-2016-7154

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number.

  • Published: Sep 21, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-7154
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
xen / xen 4.4.2 4.4.2.x
xen / xen 4.4.4 4.4.4.x
xen / xen 4.4.3 4.4.3.x
xen / xen 4.4.1 4.4.1.x
xen / xen 4.4.0 4.4.0.x