CVE Feed

    Dashboard / CVE / CVE-2016-4962

    CVE-2016-4962

    The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore.

    Published:Jun 2, 2016
    Last Modified:Apr 12, 2025
    EPS:Jun 7, 2016
    EPSS Score:0.00089
    CVSS Score:6.7

    Affected Products

    Vendor
    Oracle
    Product
    Vm Server
    Vendor
    Xen
    Product
    Xen

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-22024 (CVSS 5.5) — In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESE…
    CVE-2020-2571 (CVSS 3.3) — Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates). The supporte…
    CVE-2017-3242 (CVSS 5.9) — Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite (subcomponent: …
    CVE-2016-7039 (CVSS 7.5) — The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack con…
    CVE-2016-2776 (CVSS 7.5) — buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not…
    CVE-2016-5403 (CVSS 5.5) — The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denia…
    CVE-2016-5696 (CVSS 4.8) — net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segm…
    CVE-2016-6198 (CVSS 5.5) — The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS …
    CVE-2016-6197 (CVSS 5.5) — fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly…
    CVE-2016-4470 (CVSS 5.5) — The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High