Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-6259

Опубликовано: 02 авг. 2016
Источник: nvd
CVSS3: 6.2
CVSS2: 4.9
EPSS Низкий

Описание

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:citrix:xenserver:6.0:*:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:6.1:*:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:6.2.0:sp1:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:6.5.0:sp1:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 50%
0.00266
Низкий

6.2 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu логотип

CVE-2016-6259

CVSS3: 6.2
ubuntu
больше 9 лет назад

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.

redhat логотип

CVE-2016-6259

CVSS3: 6.3
redhat
больше 9 лет назад

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.

debian логотип

CVE-2016-6259

CVSS3: 6.2
debian
больше 9 лет назад

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Preven ...

github логотип

GHSA-prj4-495w-f4qv

CVSS3: 6.2
github
больше 3 лет назад

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.

suse-cvrf логотип

SUSE-SU-2016:2473-1

suse-cvrf
больше 9 лет назад

Security update for xen

EPSS

Процентиль: 50%
0.00266
Низкий

6.2 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20