PT-2016-7393 · Xen+1 · Xen+1

Jan Beulich · Published 2016-10-07 · Updated 2024-06-15 · CVE-2016-7777

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 4.7.x and earlier

Description The issue allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest. This is possible by modifying an instruction while the hypervisor is preparing to emulate it, due to the hypervisor not properly honoring CR0.TS and CR0.EM.

Recommendations For Xen versions 4.7.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2016-7777

DLA-699-1

DSA-3729-1

MGASA-2017-0012

OPENSUSE-SU-2016_3134-1

OPENSUSE-SU-2017_0007-1

OPENSUSE-SU-2017_0008-1

OPENSUSE-SU-2024:11520-1

SUSE-SU-2016:3044-1

SUSE-SU-2016:3067-1

SUSE-SU-2016:3083-1

SUSE-SU-2016:3156-1

SUSE-SU-2016:3174-1

SUSE-SU-2016:3273-1

SUSE-SU-2016_3067-1

SUSE-SU-2016_3083-1

SUSE-SU-2016_3156-1

SUSE-SU-2016_3174-1

SUSE-SU-2016_3273-1

Affected Products

Suse

Xen

References · 182

• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-190.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3067-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3729-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2016-7777 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3273-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-7777 · Security Note
• https://advisories.mageia.org/MGASA-2017-0012.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:3174-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-7777 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0012 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7777 · Vendor Advisory
• https://security.gentoo.org/glsa/201611-09 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7777 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3083-1 · Vendor Advisory