TI-2016-03366 Aliases CVE-2016-3960 GHSA-m63c-3j47-fcfw

Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to…

LOW 38CWE-264Published 2016-04-19 · Updated 2024-08-06

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage mapping.

Why it matters now

EPSS 0.00455 39th percentileScored 2026-11-07

Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPE	Versions	Role	Vendor
cpe:2.3:o:xen:xen:-:::::::*	not specified by NVD	Vulnerable	Xen
cpe:2.3:o:fedoraproject:fedora:22:::::::*	22	Vulnerable	Fedoraproject
cpe:2.3:o:fedoraproject:fedora:23:::::::*	23	Vulnerable	Fedoraproject
cpe:2.3:o:fedoraproject:fedora:24:::::::*	24	Vulnerable	Fedoraproject
cpe:2.3:o:oracle:vm_server:3.2:::::::*	3.2	Vulnerable	Oracle
cpe:2.3:o:oracle:vm_server:3.3:::::::*	3.3	Vulnerable	Oracle
cpe:2.3:o:oracle:vm_server:3.4:::::::*	3.4	Vulnerable	Oracle

cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Xen
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:* Versions 22 Vulnerable ·Fedoraproject
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·Fedoraproject
cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:* Versions 24 Vulnerable ·Fedoraproject
cpe:2.3:o:oracle:vm_server:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Oracle
cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Oracle
cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Oracle

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 5	Affected	No fix planned: Will not fix

Timeline

2026-10-02 Threatist record created from CVE-2016-3960
2026-10-03 Alias added: GHSA-m63c-3j47-fcfw

References

Patch 1

http://xenbits.xen.org/xsa/advisory-173.html

Advisory 5

Other 1

http://support.citrix.com/article/CTX209443

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences