CVE-2016-4480: High severity oracle vm server vulnerability
The guestwalktables function in arch/x86/mm/guestwalk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4480?
CVE-2016-4480 is considered a high severity vulnerability due to the potential for privilege escalation in local guest OS users.
How do I fix CVE-2016-4480?
To fix CVE-2016-4480, users should upgrade to a patched version of Xen or Oracle VM Server that addresses this vulnerability.
Who is affected by CVE-2016-4480?
CVE-2016-4480 affects users of Xen 4.6.x and earlier, as well as specific versions of Oracle VM Server, including 3.2, 3.3, and 3.4.
What are the potential impacts of CVE-2016-4480?
The potential impacts of CVE-2016-4480 include unauthorized access and control over the host system by local guest OS users.
What conditions are required for CVE-2016-4480 to be exploited?
For CVE-2016-4480 to be exploited, an attacker must have local access to a vulnerable guest OS and the ability to create a crafted mapping of memory.