CVE-2016-6259
Published Aug 2, 2016
Last updated 8 years ago
Overview
- Description
- Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 6.2
- Impact score
- 3.6
- Exploitability score
- 2.5
- Vector string
- CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.9
- Impact score
- 6.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
- nvd@nist.gov
- CWE-20
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90CCECD0-C0F9-45A8-8699-64428637EBCA"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0ED340C-6746-471E-9F2D-19D62D224B7A"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99BD7C4F-DE4C-4508-B20D-46A94B616C5B"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3374F1FB-70F9-4EBC-837B-0D42282E3E5F"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B6F7CE9-C409-4D88-9A99-B21420633F45"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B814C381-4991-495A-B530-7543F977B346"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14442705-D243-4250-A486-E70989946D73"
},
{
"criteria": "cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1DD0255-9127-4C7F-9C02-42198820363E"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:citrix:xenserver:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C1D10B8-202D-44A4-A872-88D7C11488D1"
},
{
"criteria": "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FCF191B-971A-4945-AB14-08091689BE2F"
},
{
"criteria": "cpe:2.3:a:citrix:xenserver:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "082A4559-2E75-4B84-8E50-304015DB9C7E"
},
{
"criteria": "cpe:2.3:a:citrix:xenserver:6.2.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "878949E0-D656-4E0E-858A-C6AD948A2A2F"
},
{
"criteria": "cpe:2.3:a:citrix:xenserver:6.5.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "674E9825-655A-4860-8FD1-7F022090922F"
},
{
"criteria": "cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "405F950F-0772-41A3-8B72-B67151CC1376"
}
],
"operator": "OR"
}
]
}
]