CVE-2016-3960: Integer Overflow
Published Apr 19, 2016
·Updated
Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping.
Affected Software
7 affected components
XEN Xen
Fedoraproject Fedora=22
Fedoraproject Fedora=23
Fedoraproject Fedora=24
Oracle VM Server=3.2
Oracle VM Server=3.3
Oracle VM Server=3.4
Remediation
Patch Available
Event History
Apr 19, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-3960?
CVE-2016-3960 has a medium severity level due to the potential for denial of service and privilege escalation.
2
How do I fix CVE-2016-3960?
To fix CVE-2016-3960, update to the latest version of affected software as provided by the vendor.
3
Which software is affected by CVE-2016-3960?
CVE-2016-3960 affects Xen, Fedora versions 22, 23, 24, and Oracle VM Server versions 3.2, 3.3, and 3.4.
4
What type of vulnerability is CVE-2016-3960?
CVE-2016-3960 is an integer overflow vulnerability that can lead to host crashes or privilege escalation.
5
Can CVE-2016-3960 be exploited remotely?
CVE-2016-3960 primarily requires local access to the guest OS for exploitation.