PT-2017-10389 · Xen+1 · Xen+1

Jan Beulich · Publicado 2016-12-21 · Atualizado 2024-06-15 · CVE-2016-9932

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 3.3.x through 4.7.x

Description The issue allows local HVM guest OS users to obtain sensitive information from host stack memory. This is achieved through the CMPXCHG8B emulation on x86 systems, where a supposedly-ignored operand size prefix is used.

Recommendations For Xen versions 3.3.x through 4.7.x, consider restricting access to the CMPXCHG8B emulation to minimize the risk of exploitation until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-9932

DLA-964-1

DSA-3847-1

MGASA-2017-0012

OPENSUSE-SU-2017_0005-1

OPENSUSE-SU-2017_0007-1

OPENSUSE-SU-2017_0008-1

OPENSUSE-SU-2024:11520-1

SUSE-SU-2016:3207-1

SUSE-SU-2016:3208-1

SUSE-SU-2016:3221-1

SUSE-SU-2016:3241-1

SUSE-SU-2017:0718-1

Produtos afetados

Suse

Xen

Referências · 172

• https://osv.dev/vulnerability/CVE-2016-9932 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-10025 · Nota
• https://bugzilla.suse.com/1012651 · Nota
• https://suse.com/security/cve/CVE-2020-29481 · Nota
• https://suse.com/security/cve/CVE-2020-29570 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-15563 · Nota
• https://support.citrix.com/article/CTX219378 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-3919 · Nota
• https://xenbits.xen.org/xsa/advisory-184.html · Nota
• https://suse.com/security/cve/CVE-2016-9382 · Nota
• https://suse.com/security/cve/CVE-2016-10155 · Nota
• https://suse.com/security/cve/CVE-2020-29483 · Nota
• https://bugzilla.suse.com/1014298 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9932 · Aviso do Fabricante