Published: 19/04/2016 Updated: 03/12/2016

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 8.8 | Impact Score: 6 | Exploitability Score: 2

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen -
fedoraproject fedora 24
fedoraproject fedora 23
fedoraproject fedora 22
oracle vm server 3.4
oracle vm server 3.3
oracle vm server 3.2

Debian Bug report logs - #823620 Multiple security issues Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Fri, 6 May 2016 18:03:02 UTC Severity: grave Tags: security Fixed in versions xen/480~rc3-1, xen/48 ...

Multiple vulnerabilities have been discovered in the Xen hypervisor The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-3158, CVE-2016-3159 (XSA-172) Jan Beulich from SUSE discovered that Xen does not properly handle writes to the hardware FSWES bit when running on AMD64 processors A maliciou ...

Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping ...

CWE-264 NVD-CWE-Other http://xenbits.xen.org/xsa/advisory-173.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183275.html http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184209.html http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183350.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.securityfocus.com/bid/86318 http://support.citrix.com/article/CTX209443 http://www.debian.org/security/2016/dsa-3554 http://www.securitytracker.com/id/1035587 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823620 https://www.debian.org/security/./dsa-3554 https://access.redhat.com/security/cve/cve-2016-3960

CVE-2016-3960

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect