Skip to main content

DEPRECATED: Code

CVE-2016-1571

Medium
6.3/10

Summary

The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.

  • HIGH
  • NETWORK
  • NONE
  • CHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-17 - DEPRECATED: Code

This entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.

References

Advisory Timeline

  • Published