5.5

CVE-2016-3961

Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 15.10
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Xen ≫ Xen Version <= 4.5.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.393
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.ubuntu.com/usn/USN-3001-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3002-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3003-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3004-1
Third Party Advisory
http://www.debian.org/security/2016/dsa-3607
http://www.securityfocus.com/bid/86068
http://www.securitytracker.com/id/1035569
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-3005-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3006-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3007-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3049-1
http://www.ubuntu.com/usn/USN-3050-1
http://xenbits.xen.org/xsa/advisory-174.html
Vendor Advisory
http://xenbits.xen.org/xsa/xsa174.patch
Patch