PT-2016-1714 · Amd+1 · Xen+1
Jan Beulich
·
Publicado
2016-04-13
·
Atualizado
2017-01-09
·
CVE-2016-3158
CVSS v3.1
3.8
Baixa
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Xen versions 4.x
Description
The issue is related to the xrstor function in Xen, which does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors. This allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits, such as the
exception mask bit. The problem is due to an incorrect fix for a previous issue.Recommendations
For Xen version 4.x, consider disabling the
xrstor function as a temporary workaround until a patch is available. Restrict access to sensitive register content information to minimize the risk of exploitation.Correção
Improper Access Control
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Suse
Xen