Denial of service - #VU392
Published: September 9, 2016 / Updated: September 13, 2016
Detailed vulnerability description
The vulnerability allows local administrative user to cause denial of service on the host system.
The vulnerability is caused by drawbacks in the state information allocation.
Successful exploitation of this vulnerability will allow an attacker to trigger a denial of service on the vulnerable system.
Remediation
Install patched version from vendor's website:
xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch
xsa187-0002-x86-segment-Bounds-check-accesses-to-emulation-ctxt-.patch
xsa187-4.4-0002-x86-segment-Bounds-check-accesses-to-emulation-ctx.patch
xsa187-4.6-0002-x86-segment-Bounds-check-accesses-to-emulation-ctx.patch
xsa187-4.7-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg.patch
xsa187-4.7-0002-x86-segment-Bounds-check-accesses-to-emulation-ctx.patch