CVE-2016-2270: Input Validation
Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2270?
The severity of CVE-2016-2270 is classified as high due to the potential for local guest administrators to cause denial of service by rebooting the host.
How do I fix CVE-2016-2270?
To fix CVE-2016-2270, update your affected Xen or operating system version to a patched version that resolves this vulnerability.
Which software versions are affected by CVE-2016-2270?
CVE-2016-2270 affects Xen versions up to 4.6.1 and various Linux distributions including Debian 7.0, 8.0 and Fedora versions 22 and 23.
What type of vulnerability is CVE-2016-2270?
CVE-2016-2270 is a local denial of service vulnerability that allows guest administrators to reboot the host through MMIO page mapping issues.
Is CVE-2016-2270 a critical vulnerability for virtualized environments?
Yes, CVE-2016-2270 poses a critical risk for virtualized environments as it can lead to service disruptions affecting all guests on the host.