CVE Feed

    Dashboard / CVE / CVE-2016-4480

    CVE-2016-4480

    The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.

    Published:May 17, 2016
    Last Modified:Apr 12, 2025
    EPS:May 18, 2016
    EPSS Score:0.00172
    CVSS Score:8.4

    Affected Products

    Vendor
    Oracle
    Product
    Vm Server
    Vendor
    Xen
    Product
    Xen

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-22024 (CVSS 5.5) — In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESE…
    CVE-2020-2571 (CVSS 3.3) — Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). The supporte…
    CVE-2017-3242 (CVSS 5.9) — Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite (subcomponent: …
    CVE-2016-7039 (CVSS 7.5) — The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack con…
    CVE-2016-2776 (CVSS 7.5) — buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not…
    CVE-2016-5403 (CVSS 5.5) — The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denia…
    CVE-2016-5696 (CVSS 4.8) — net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segm…
    CVE-2016-6198 (CVSS 5.5) — The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS …
    CVE-2016-6197 (CVSS 5.5) — fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly…
    CVE-2016-4470 (CVSS 5.5) — The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High