CVEvulnerability
CVE-2016-1571
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-01-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.3 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-17
Description
The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
Affected configurations
• citrix xenserver (<= 6.5)
• xen xen 3.3.0
• xen xen 3.3.1
• xen xen 3.3.2
• xen xen 3.4.0
• xen xen 3.4.1
• xen xen 3.4.2
• xen xen 3.4.3
• xen xen 3.4.4
• xen xen 4.1.0
• xen xen 4.1.1
• xen xen 4.1.2
• xen xen 4.1.3
• xen xen 4.1.4
• xen xen 4.1.5
• xen xen 4.1.6
• xen xen 4.1.6.1
• xen xen 4.2.0
• xen xen 4.2.1
• xen xen 4.2.2
• xen xen 4.2.3
• xen xen 4.2.4
• xen xen 4.2.5
• xen xen 4.3.0
• xen xen 4.3.1
• xen xen 4.3.2
• xen xen 4.3.3
• xen xen 4.3.4
• xen xen 4.4.0
• xen xen 4.4.1
• xen xen 4.4.2
• xen xen 4.4.3
• xen xen 4.5.0
• xen xen 4.5.1
• xen xen 4.5.2
• xen xen 4.6.0
Related
Weakness · not in database (1)
References
- http://support.citrix.com/article/CTX205496 Third Party Advisory
- http://www.debian.org/security/2016/dsa-3519 www.debian.org
- http://www.securitytracker.com/id/1034745 Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-168.html Vendor Advisory
- http://support.citrix.com/article/CTX205496 Third Party Advisory
- http://www.debian.org/security/2016/dsa-3519 www.debian.org
- http://www.securitytracker.com/id/1034745 Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-168.html Vendor Advisory