CVE-2016-10025

Description

VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.

CVSS Metrics

• v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
• v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 0.12%• Percentile: 31%

Techniques & Countermeasures

• CWE-476•NULL Pointer Dereference

  The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

• citrix•xenserver

  6.0.2 | 6.2.0 | 6.5 | 7.0

• xen•xen

  4.6.0 | 4.6.1 | 4.6.3 | 4.6.4 | 4.7.0 | 4.7.1 | 4.8.0

References (4)

• http://www.securityfocus.com/bid/95026
• http://xenbits.xen.org/xsa/advisory-203.html
• https://support.citrix.com/article/CTX219378
• http://www.securitytracker.com/id/1037518