CVE-2016-6259

Description

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.

CVSS Metrics

• v3.0•MEDIUM•Score: 6.2CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
• v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.27%• Percentile: 50%

Techniques & Countermeasures

• CWE-20•Improper Input Validation

  The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected Systems

• citrix•xenserver

  6.0 | 6.0.2 | 6.1 | 6.2.0:sp1 | 6.5.0:sp1 | 7.0

• xen•xen

  4.5.0 | 4.5.1 | 4.5.2 | 4.5.3 | 4.6.0 | 4.6.1 | 4.6.3 | 4.7.0

References (6)

• http://www.securityfocus.com/bid/92130
• http://support.citrix.com/article/CTX214954
• http://www.securitytracker.com/id/1036447
• http://xenbits.xen.org/xsa/xsa183-unstable.patch
• http://xenbits.xen.org/xsa/advisory-183.html
• http://xenbits.xen.org/xsa/xsa183-4.6.patch