The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xenserver | Citrix | 6.0.2 (including) | 6.0.2 (including) |
| Xenserver | Citrix | 6.2.0-sp1 (including) | 6.2.0-sp1 (including) |
| Xenserver | Citrix | 6.5-sp1 (including) | 6.5-sp1 (including) |
| Xenserver | Citrix | 7.0 (including) | 7.0 (including) |
| Red Hat Enterprise Linux 5 | RedHat | xen-0:3.0.3-148.el5_11 | * |
| Xen | Ubuntu | precise | * |
| Xen | Ubuntu | trusty | * |