PT-2016-4865 · Xen+1 · Xen+1

Jan Beulich · Published 2016-01-22 · Updated 2024-06-15 · CVE-2016-1571

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen versions 3.3.x through 4.6.x

Description The issue allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction. This occurs when using shadow mode paging or nested virtualization, and it triggers a hypervisor bug check.

Recommendations For Xen versions 3.3.x through 4.6.x, consider disabling shadow mode paging or nested virtualization as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-17

Related Identifiers

CVE-2016-1571

DLA-479-1

DSA-3519-1

MGASA-2016-0098

OPENSUSE-SU-2016_0995-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2016:0873-1

SUSE-SU-2016:0955-1

SUSE-SU-2016:1154-1

SUSE-SU-2016:1318-1

SUSE-SU-2016:1745-1

Affected Products

Suse

Xen

References · 292

• https://osv.dev/vulnerability/SUSE-SU-2016:0955-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-1571 · Security Note
• https://advisories.mageia.org/MGASA-2016-0098.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-1571 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1154-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0873-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3519-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1571 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-1571 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1318-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1571 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1571 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1745-1 · Vendor Advisory
• http://debian.org/security/2016/dsa-3519 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-168.html · Vendor Advisory