PT-2016-7393 · Xen+1 · Xen+1
Jan Beulich
·
Publicado
2016-10-07
·
Atualizado
2024-06-15
·
CVE-2016-7777
CVSS v3.1
6.3
Média
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Xen versions 4.7.x and earlier
Description
The issue allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest. This is possible by modifying an instruction while the hypervisor is preparing to emulate it, due to the hypervisor not properly honoring CR0.TS and CR0.EM.
Recommendations
For Xen versions 4.7.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Xen