CVE-2016-3960 Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping.
HighCVSS 8.8
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xen(Debian:12) | < 4.8.0~rc3-1 | 4.8.0~rc3-1 |
| debian/xen(Debian:13) | < 4.8.0~rc3-1 | 4.8.0~rc3-1 |
| debian/xen(Debian:14) | < 4.8.0~rc3-1 | 4.8.0~rc3-1 |
| Xen | All versions | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| oracle vm server | = 3.2 | No fix listed |
| oracle vm server | = 3.3 | No fix listed |
| oracle vm server | = 3.4 | No fix listed |
References
- Debian Security Tracker CVE-2016-3960 vendor-advisory
- FEDORA-2016-35d7b09908 third-party-advisory vendor-advisory
- FEDORA-2016-75063477ca third-party-advisory vendor-advisory
- FEDORA-2016-48e72b7bc5 third-party-advisory vendor-advisory
- support.citrix.com
- DSA-3554 vendor-advisory
- www.oracle.com vendor-advisory
- 86318 vdb-entry
- 1035587 vdb-entry
- xenbits.xen.org patch vendor-advisory
- bugs.debian.org issue-tracking