PT-2016-1713 · Amd+1 · Xen+1

Jan Beulich · Published 2016-04-13 · Updated 2019-02-21 · CVE-2016-3159

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 4.x

Description The issue is related to the fpu fxrstor function in arch/x86/i387.c, which does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors. This allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits, such as the exception and mask bits. The problem arises due to insufficient access control.

Recommendations For Xen version 4.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

BDU:2016-01039

CVE-2016-3159

DLA-571-1

DSA-3554-1

MGASA-2017-0012

OPENSUSE-SU-2016_2494-1

OPENSUSE-SU-2016_2497-1

SUSE-SU-2016:2093-1

SUSE-SU-2016:2100-1

SUSE-SU-2016:2528-1

SUSE-SU-2016:2533-1

SUSE-SU-2016:2725-1

Affected Products

Suse

Xen

References · 164

• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181699.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181729.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3159 · Vendor Advisory
• http://debian.org/security/2016/dsa-3554 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2725-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3554-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2533-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2093-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-3159 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2528-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0012.html · Security Note
• http://xenbits.xen.org/xsa/xsa172.patch · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-172.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0012 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3159 · Vendor Advisory