CVE-2016-9386

Name	CVE-2016-9386
Description	The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
References	DLA-720-1, DSA-3729-1
Debian Bugs	845663

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
xen (PTS)	buster, buster (security)	4.11.4+107-gef32c7afa2-1	fixed
	bullseye (security), bullseye	4.14.5+94-ge49571868d-1	fixed
	bookworm, sid	4.17.1+2-gb773c48e36-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
xen	source	wheezy	4.1.6.lts1-4	DLA-720-1
xen	source	jessie	4.4.1-9+deb8u8	DSA-3729-1
xen	source	(unstable)	4.8.0-1		845663

https://xenbits.xen.org/xsa/advisory-191.html