CVEvulnerability
CVE-2007-6416
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations.
Affected configurations
• xen xen 3.1.2
Related
Weakness · not in database (1)
References
- http://osvdb.org/41344 osvdb.org
- http://secunia.com/advisories/28146 secunia.com
- http://secunia.com/advisories/28643 secunia.com
- http://www.redhat.com/support/errata/RHSA-2008-0089.html www.redhat.com
- http://www.securityfocus.com/bid/26954 www.securityfocus.com
- http://xenbits.xensource.com/ext/ia64/xen-unstable.hg?rev/e6069a715fd7 Exploit
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9840 oval.cisecurity.org
- http://osvdb.org/41344 osvdb.org
- http://secunia.com/advisories/28146 secunia.com
- http://secunia.com/advisories/28643 secunia.com
- http://www.redhat.com/support/errata/RHSA-2008-0089.html www.redhat.com
- http://www.securityfocus.com/bid/26954 www.securityfocus.com
- http://xenbits.xensource.com/ext/ia64/xen-unstable.hg?rev/e6069a715fd7 Exploit
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9840 oval.cisecurity.org