CVE-2016-2270

Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.

• CWE-20

• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3519Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlVendor Advisory
• http://www.securitytracker.com/id/1035042Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-154.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201604-03
• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177990.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178518.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3519Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlVendor Advisory
• http://www.securitytracker.com/id/1035042Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-154.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201604-03

Published

Feb 19, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2263Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-2264Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-2265Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-2266Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-2267Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-2268Dell SecureWorks app before 2.1 for iOS does not validate SS…
• CVE-2016-2271VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix C…
• CVE-2016-2272Eaton Lighting EG2 Web Control 4.04P and earlier allows remo…
• CVE-2016-2273Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2274An issue was discovered in Adcon Telemetry A850 Telemetry Ga…
• CVE-2016-2275The web interface on Advantech/B+B SmartWorx VESP211-EU devi…
• CVE-2016-2276Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…