CVE-2016-10025

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/95026Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037518Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-203.htmlPatch, Vendor Advisory
https://support.citrix.com/article/CTX219378Patch, Third Party Advisory
http://www.securityfocus.com/bid/95026Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037518Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-203.htmlPatch, Vendor Advisory
https://support.citrix.com/article/CTX219378Patch, Third Party Advisory

Timeline

Published: Jan 26, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-100267.5ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges p CVE-2016-100275.9Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle CVE-2016-100285.5The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support a CVE-2016-100295.5The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users t CVE-2016-100308.1The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability i CVE-2016-100317.5WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This CVE-2016-100339.8The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail c CVE-2016-100349.8The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framew CVE-2016-100369.8Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbit CVE-2016-100377.3Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/trav CVE-2016-100387.3Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/trav CVE-2016-100397.3Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/trav