CVE-2016-6259: Input Validation
Published Aug 2, 2016
·Updated
Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.
Affected Software
14 affected components
XEN Xen=4.5.0
XEN Xen=4.5.1
XEN Xen=4.5.2
XEN Xen=4.5.3
XEN Xen=4.6.0
XEN Xen=4.6.1
XEN Xen=4.6.3
XEN Xen=4.7.0
Citrix XenServer=6.0
Citrix XenServer=6.0.2
Citrix XenServer=6.1
Citrix XenServer=6.2.0-sp1
Citrix XenServer=6.5.0-sp1
Citrix XenServer=7.0
Remediation
Patch Available
Patch Available
Patch Available
Event History
Aug 2, 2016
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6259?
CVE-2016-6259 has been classified as a moderate severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2016-6259?
To fix CVE-2016-6259, you need to upgrade to a patched version of Xen or XenServer that addresses the SMAP whitelisting issue.
3
What versions of Xen are affected by CVE-2016-6259?
CVE-2016-6259 affects Xen versions 4.5.x through 4.7.x.
4
Can CVE-2016-6259 be exploited remotely?
No, CVE-2016-6259 requires local access to the 32-bit PV guest OS to exploit the vulnerability.
5
What impact does CVE-2016-6259 have on systems?
CVE-2016-6259 may lead to a denial of service, causing hypervisor and VM crashes.