PT-2016-6321 · Xen · Xen

Aaron Cornelius · Published 2016-06-07 · Updated 2017-01-09 · CVE-2016-5242

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x through 4.6.x

Description The issue allows local guest OS users with access to the driver domain to cause a denial of service, resulting in a NULL pointer dereference and host OS crash. This is achieved by creating concurrent domains and holding references to them, which is related to VMID exhaustion.

Recommendations For Xen versions 4.4.x through 4.6.x, consider restricting access to the p2m teardown function in the driver domain to prevent concurrent domain creation and mitigate the risk of a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2016-5242

DSA-3633-1

MGASA-2017-0012

Affected Products

Xen

References · 44

• https://osv.dev/vulnerability/MGASA-2017-0012 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-181.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-5242 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3633-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5242 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-5242 · Security Note
• https://ubuntu.com/security/CVE-2016-5242 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5242 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-5242 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0012.html · Security Note
• http://debian.org/security/2016/dsa-3633 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-5242 · Vendor Advisory
• https://xenbits.xen.org/xsa/advisory-185.html · Note
• https://xenbits.xen.org/xsa/advisory-194.html · Note
• https://xenproject.org/downloads/xen-archives/xen-45-series/xen-453.html · Note