NVD

Id
20115  
Name
CVE-2016-4480  
Description
The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-18  
Modified Date
2016-11-30  
Seq
2016-4480  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
109784 20115 CVE-2016-4480 DSA-3633  View
109785 20115 CVE-2016-4480 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
109786 20115 CVE-2016-4480 90710  View
109787 20115 CVE-2016-4480 1035901  View
109788 20115 CVE-2016-4480 http://xenbits.xen.org/xsa/advisory-176.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2007 JVNDB-2016-002780 Xen の arch/x86/mm/guest_walk.c の guest_walk_tables 関数における権限を取得される脆弱性 Xen の arch/x86/mm/guest_walk.c の guest_walk_tables 関数は、ページサイズ (PS) のページテーブルエントリのビットを L4 および L3 のページテーブルレベルで適切に処理しないため、権限を取得される脆弱性が存在します。 CVE-2016-4480 90986 CVE-2016-4480 20115 7.2 8.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002780.html 2016-05-17 2016-11-16 View