Published: 19/02/2016 Updated: 01/07/2017

CVSS v2 Base Score: 4.6 | Impact Score: 6.9 | Exploitability Score: 3.1

CVSS v3 Base Score: 6.8 | Impact Score: 4 | Exploitability Score: 2.3

VMScore: 409

Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C

Xen 4.6.x and previous versions allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 7.0
debian debian linux 8.0
fedoraproject fedora 22
fedoraproject fedora 23
xen xen
oracle vm server 3.4

Debian Bug report logs - #823620 Multiple security issues Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Fri, 6 May 2016 18:03:02 UTC Severity: grave Tags: security Fixed in versions xen/480~rc3-1, xen/48 ...

Multiple security issues have been found in the Xen virtualisation solution, which may result in denial of service or information disclosure The oldstable distribution (wheezy) will be updated in a separate DSA For the stable distribution (jessie), these problems have been fixed in version 441-9+deb8u4 For the unstable distribution (sid), thes ...

Xen 46x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings ...

CWE-20 http://xenbits.xen.org/xsa/advisory-154.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.html http://www.debian.org/security/2016/dsa-3519 http://www.securitytracker.com/id/1035042 https://security.gentoo.org/glsa/201604-03 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823620 https://www.debian.org/security/./dsa-3519

CVE-2016-2270

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect