PT-2016-1710 · Xen+2 · Xen+2

Vitaly Kuznetsov · Published 2016-04-15 · Updated 2016-11-28 · CVE-2016-3961

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen and the Linux kernel versions prior to 4.6

Description The issue arises from insufficient input validation in the Xen hypervisor, allowing a local attacker to cause a denial of service by attempting to access a hugetlbfs mapped area, resulting in a guest OS crash.

Recommendations For Xen and Linux kernel versions prior to 4.6, update to a version that properly suppresses hugetlbfs support in x86 PV guests to prevent the denial of service.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2016-01036

CVE-2016-3961

DLA-516-1

DSA-3607-1

MGASA-2016-0225

MGASA-2016-0232

MGASA-2016-0233

USN-3001-1

USN-3002-1

USN-3003-1

USN-3004-1

USN-3005-1

USN-3006-1

USN-3007-1

USN-3049-1

USN-3050-1

USN-3127-1

USN-3127-2

Affected Products

Linux Kernel

Ubuntu

Xen

References · 107

• https://osv.dev/vulnerability/DSA-3607-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3005-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-4004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4486 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3127-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2117 · Vendor Advisory
• http://xenbits.xen.org/xsa/xsa174.patch · Patch
• http://ubuntu.com/usn/USN-3002-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-3961 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2187 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3001-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3001-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3004-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3961 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0225 · Vendor Advisory