4.7.1

DATE	CVE	VULNERABILITY TITLE	RISK
2017-01-23	CVE-2016-9385	Improper Input Validation vulnerability in multiple products The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks. local low complexity xen citrix CWE-20	4.9
2017-01-23	CVE-2016-9382	Permissions, Privileges, and Access Controls vulnerability in multiple products Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode. local low complexity xen citrix CWE-264	4.6