PT-2016-6321 · Xen · Xen

Aaron Cornelius · Publicado 2016-06-07 · Atualizado 2017-01-09 · CVE-2016-5242

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Média

Vetor base

AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x through 4.6.x

Description The issue allows local guest OS users with access to the driver domain to cause a denial of service, resulting in a NULL pointer dereference and host OS crash. This is achieved by creating concurrent domains and holding references to them, which is related to VMID exhaustion.

Recommendations For Xen versions 4.4.x through 4.6.x, consider restricting access to the p2m teardown function in the driver domain to prevent concurrent domain creation and mitigate the risk of a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2016-5242

DSA-3633-1

MGASA-2017-0012

Produtos afetados

Xen

Referências · 44

• https://xenbits.xen.org/xsa/advisory-185.html · Nota
• https://osv.dev/vulnerability/MGASA-2017-0012 · Aviso do Fabricante
• http://xenbits.xen.org/xsa/advisory-181.html · Aviso do Fabricante
• https://xenbits.xen.org/xsa/advisory-194.html · Nota
• https://xenproject.org/downloads/xen-archives/xen-45-series/xen-453.html · Nota
• https://xenbits.xen.org/xsa/advisory-173.html · Nota
• https://xenbits.xen.org/xsa/advisory-181.html · Nota
• https://xenbits.xen.org/xsa/advisory-184.html · Nota
• http://securityfocus.com/bid/91015 · Nota
• https://security-tracker.debian.org/tracker/CVE-2016-5242 · Aviso do Fabricante
• https://xenbits.xen.org/xsa/advisory-172.html · Nota
• https://osv.dev/vulnerability/DSA-3633-1 · Aviso do Fabricante
• https://xenbits.xen.org/xsa/advisory-191.html · Nota
• https://xenbits.xen.org/xsa/advisory-182.html · Nota
• https://xenproject.org/downloads/xen-archives/xen-45-series/xen-455.html · Nota