Lucene search

K
cve[email protected]CVE-2007-6416
HistoryDec 17, 2007 - 11:46 p.m.

CVE-2007-6416

2007-12-1723:46:00
CWE-264
web.nvd.nist.gov
32
cve-2007-6416
xen
pal emulation
ia64
memory access
security vulnerability

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.6%

The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations.

Affected configurations

NVD
Node
xenxenMatch3.1.2
CPENameOperatorVersion
xen:xenxeneq3.1.2

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.6%