VYPR
Medium severity5.5NVD Advisory· Published Jan 26, 2017· Updated May 13, 2026

CVE-2016-10025

CVE-2016-10025

Description

VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.

Affected products

11
  • cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenserver:6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*
  • Xen/Xen7 versions
    cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.