CVE-2016-4480: oracle vm_server
Vulnerability summary
CVE-2016-4480 is a high (CVSS 8.4) vulnerability in oracle vm_server. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 45.6% of scored vulnerabilities.
Not severe (CVSS 8.4, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 18-05-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated8.4HighCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.4HighCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.54%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.54% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Debian1 product
- xen< 4.8.0~rc3-1
Oracle1 product
- vm_server3.2 | 3.3 | 3.4
Ubuntu1 product
- xen< 4.4.2-0ubuntu0.14.04.6 | < 4.6.0-1ubuntu4.1
Xen1 product
- xen≤ 4.6.1
4 vendors · 4 products
References
8 links- www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRMVendor Advisory
