The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
References
| Link | Resource |
|---|---|
| http://support.citrix.com/article/CTX205496 | Third Party Advisory |
| http://www.debian.org/security/2016/dsa-3519 | |
| http://www.securitytracker.com/id/1034745 | Third Party Advisory |
| http://xenbits.xen.org/xsa/advisory-168.html | Vendor Advisory |
| http://support.citrix.com/article/CTX205496 | Third Party Advisory |
| http://www.debian.org/security/2016/dsa-3519 | |
| http://www.securitytracker.com/id/1034745 | Third Party Advisory |
| http://xenbits.xen.org/xsa/advisory-168.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 02:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://support.citrix.com/article/CTX205496 - Third Party Advisory | |
| References | () http://www.debian.org/security/2016/dsa-3519 - | |
| References | () http://www.securitytracker.com/id/1034745 - Third Party Advisory | |
| References | () http://xenbits.xen.org/xsa/advisory-168.html - Vendor Advisory |
Information
Published : 2016-01-22 15:59
Updated : 2024-11-21 02:46
NVD link : CVE-2016-1571
Mitre link : CVE-2016-1571
CVE.ORG link : CVE-2016-1571
JSON object : View
Products Affected
citrix
- xenserver
xen
- xen
CWE
CWE-17
DEPRECATED: Code