CVE-2016-1571: Medium severity xenserver vulnerability
The paginginvlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1571?
CVE-2016-1571 is classified as a high severity vulnerability that can lead to denial of service conditions on the host.
How do I fix CVE-2016-1571?
To fix CVE-2016-1571, users should upgrade to a fixed version of Xen that addresses this vulnerability.
Who is affected by CVE-2016-1571?
CVE-2016-1571 affects local HVM guest users of Xen versions from 3.3.x through 4.6.x who are using shadow mode paging or nested virtualization.
What type of attack does CVE-2016-1571 enable?
CVE-2016-1571 allows a local attacker to cause a denial of service by sending a non-canonical guest address in an INVVPID instruction.
Can CVE-2016-1571 crash the host?
Yes, CVE-2016-1571 can trigger a host crash through a denial of service due to improper handling of INVVPID instructions.