NetSight
IP …
medium6.2

CVE-2016-6259

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bi…

Impact

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.

Affected products

VendorProductAffected versions
XenXen
Versions 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.6.0, 4.6.1
CitrixXenserver
Versions 6.0, 6.0.2, 6.1, 6.2.0, 6.5.0, 7.0

Weakness classification

CWE-20

References