Vulnerability Details CVE-2016-10025
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.4%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
References
- http://www.securityfocus.com/bid/95026
- http://www.securitytracker.com/id/1037518
- http://xenbits.xen.org/xsa/advisory-203.html
- https://support.citrix.com/article/CTX219378
- http://www.securityfocus.com/bid/95026
- http://www.securitytracker.com/id/1037518
- http://xenbits.xen.org/xsa/advisory-203.html
- https://support.citrix.com/article/CTX219378
Products affected by CVE-2016-10025
-
cpe:2.3:a:citrix:xenserver:6.0.2
-
cpe:2.3:a:citrix:xenserver:6.2.0
-
cpe:2.3:a:citrix:xenserver:6.5
-
cpe:2.3:a:citrix:xenserver:7.0
-
cpe:2.3:o:xen:xen:4.6.0
-
cpe:2.3:o:xen:xen:4.6.1
-
cpe:2.3:o:xen:xen:4.6.3
-
cpe:2.3:o:xen:xen:4.6.4
-
cpe:2.3:o:xen:xen:4.7.0
-
cpe:2.3:o:xen:xen:4.7.1
-
cpe:2.3:o:xen:xen:4.8.0