What is CVE-2016-5242?

CVE-2016-5242 is a medium-severity vulnerability in Xen. CVSS score: 5.6/10. Published 2016-06-07.

How severe is CVE-2016-5242?

Medium severity. CVSS v3 base score is 5.6 out of 10.

Vulnerability in Xen

CVE-2016-5242

The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion.

EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.6 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H.

Affected products

Xen — versions 4.4.0, 4.4.1, 4.4.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)

Frequently asked questions

What is CVE-2016-5242?: CVE-2016-5242 is a medium-severity vulnerability in Xen. CVSS score: 5.6/10. Published 2016-06-07.
How severe is CVE-2016-5242?: Medium severity. CVSS v3 base score is 5.6 out of 10.