CVE-2016-9815

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous abort.

• CWE-284

• http://www.openwall.com/lists/oss-security/2016/11/29/3Mailing List, Mitigation, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/12/05/7Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94581Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037358
• http://xenbits.xen.org/xsa/advisory-201.htmlMitigation, Patch, Vendor Advisory
• http://xenbits.xen.org/xsa/xsa201-1.patchPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201612-56
• http://www.openwall.com/lists/oss-security/2016/11/29/3Mailing List, Mitigation, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/12/05/7Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94581Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037358
• http://xenbits.xen.org/xsa/advisory-201.htmlMitigation, Patch, Vendor Advisory
• http://xenbits.xen.org/xsa/xsa201-1.patchPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201612-56

Published

Feb 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9809Off-by-one error in the gst_h264_parse_set_caps function in …
• CVE-2016-9810The gst_decode_chain_free_internal function in the flxdex de…
• CVE-2016-9811The windows_icon_typefind function in gst-plugins-base in GS…4.7
• CVE-2016-9812The gst_mpegts_section_new function in the mpegts decoder in…
• CVE-2016-9813The _parse_pat function in the mpegts parser in GStreamer be…
• CVE-2016-9814The validateSignature method in the SAML2\Utils class in Sim…
• CVE-2016-9816Xen through 4.7.x allows local ARM guest OS users to cause a…
• CVE-2016-9817Xen through 4.7.x allows local ARM guest OS users to cause a…
• CVE-2016-9818Xen through 4.7.x allows local ARM guest OS users to cause a…
• CVE-2016-9819libavcodec/mpegvideo.c in libav 11.8 allows remote attackers…
• CVE-2016-9820libavcodec/mpegvideo_motion.c in libav 11.8 allows remote at…
• CVE-2016-9821Integer overflow in libavcodec/mpegvideo_parser.c in libav 1…