CVE-2016-4480
First published: Wed May 18 2016(Updated: )
The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle VM Server | =3.2 | |
| Oracle VM Server | =3.3 | |
| Oracle VM Server | =3.4 | |
| Xen XAPI | <=4.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-4480?
CVE-2016-4480 is considered a high severity vulnerability due to the potential for privilege escalation in local guest OS users.
How do I fix CVE-2016-4480?
To fix CVE-2016-4480, users should upgrade to a patched version of Xen or Oracle VM Server that addresses this vulnerability.
Who is affected by CVE-2016-4480?
CVE-2016-4480 affects users of Xen 4.6.x and earlier, as well as specific versions of Oracle VM Server, including 3.2, 3.3, and 3.4.
What are the potential impacts of CVE-2016-4480?
The potential impacts of CVE-2016-4480 include unauthorized access and control over the host system by local guest OS users.
What conditions are required for CVE-2016-4480 to be exploited?
For CVE-2016-4480 to be exploited, an attacker must have local access to a vulnerable guest OS and the ability to create a crafted mapping of memory.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/severity
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle vm server
- version/oracle vm server/3.2
- version/oracle vm server/3.3
- version/oracle vm server/3.4
- vendor/xen
- canonical/xen xapi
- version/xen xapi/4.6.1