CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
26.7%
The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
Vendor | Product | Version | CPE |
---|---|---|---|
xen | xen | 3.4.0 | cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:* |
xen | xen | 3.4.2 | cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:* |
xen | xen | 3.4.3 | cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:* |
xen | xen | 3.4.4 | cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:* |
xen | xen | 4.0.0 | cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:* |
xen | xen | 4.0.1 | cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:* |
xen | xen | 4.0.3 | cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:* |
xen | xen | 4.0.4 | cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:* |
xen | xen | 4.1.0 | cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:* |
xen | xen | 4.1.1 | cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:* |
support.citrix.com/article/CTX214954
www.debian.org/security/2016/dsa-3633
www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
www.securityfocus.com/bid/92131
www.securitytracker.com/id/1036446
xenbits.xen.org/xsa/advisory-182.html
xenbits.xen.org/xsa/xsa182-4.5.patch
xenbits.xen.org/xsa/xsa182-4.6.patch
xenbits.xen.org/xsa/xsa182-unstable.patch
security.gentoo.org/glsa/201611-09
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
26.7%