UBUNTU-CVE-2016-4480
Dashboard / Vulnerabilities / UBUNTU-CVE-2016-4480
Summary:
Details: The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
References: https://ubuntu.com/security/CVE-2016-4480, http://xenbits.xen.org/xsa/advisory-176.html, https://www.cve.org/CVERecord?id=CVE-2016-4480
Affected packages
Package
Name: xen
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=trusty
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -4.4.2-0ubuntu0.14.04.6
Affected versions
4.3.0-1ubuntu1
4.3.0-1ubuntu2
4.3.0-1ubuntu3
4.3.0-1ubuntu4
4.3.0-1ubuntu5
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
