CVE-2016-6259

🗓️ 02 Aug 2016 16:00:00Reported by mitreType

Xen 4.5.x - 4.7.x doesn't implement SMAP whitelisting in 32-bit exception, allowing for DoS

Reporter	Title	Published	Views	Family All 44
FreeBSD	xen-kernel -- x86: Missing SMAP whitelisting in 32-bit exception / event delivery	26 Jul 201600:00	–	freebsd
Tenable Nessus	Citrix XenServer Multiple Vulnerabilities (CTX214954) (Bunker Buster)	4 Aug 201600:00	–	nessus
Tenable Nessus	Fedora 23 : xen (2016-0049aa6e5d) (Bunker Buster)	9 Aug 201600:00	–	nessus
Tenable Nessus	Fedora 24 : xen (2016-01cc766201) (Bunker Buster)	8 Aug 201600:00	–	nessus
Tenable Nessus	FreeBSD : xen-kernel -- x86: Missing SMAP whitelisting in 32-bit exception / event delivery (04cf89e3-5854-11e6-b334-002590263bf5)	2 Aug 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : xen (openSUSE-2016-1170) (Bunker Buster)	12 Oct 201600:00	–	nessus
Tenable Nessus	RHEL 5 : xsa183_xen (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 5 : xen (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:2093-1) (Bunker Buster)	2 Sep 201600:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:2473-1) (Bunker Buster)	10 Oct 201600:00	–	nessus

NVD

Node

xen xenMatch4.5.0

xen xenMatch4.5.1

xen xenMatch4.5.2

xen xenMatch4.5.3

xen xenMatch4.6.0

xen xenMatch4.6.1

xen xenMatch4.6.3

xen xenMatch4.7.0

Node

Source	Link
xenbits	www.xenbits.xen.org/xsa/xsa183-4.6.patch
support	www.support.citrix.com/article/CTX214954
securitytracker	www.securitytracker.com/id/1036447
xenbits	www.xenbits.xen.org/xsa/advisory-183.html
xenbits	www.xenbits.xen.org/xsa/xsa183-unstable.patch
securityfocus	www.securityfocus.com/bid/92130

06 May 2026 22:30Current

6Medium risk

Vulners AI Score6

CVSS 24.9

CVSS 36.2

EPSS0.00266