PT-2017-10389 · Xen+1 · Xen+1

Jan Beulich · Published 2016-12-21 · Updated 2024-06-15 · CVE-2016-9932

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 3.3.x through 4.7.x

Description The issue allows local HVM guest OS users to obtain sensitive information from host stack memory. This is achieved through the CMPXCHG8B emulation on x86 systems, where a supposedly-ignored operand size prefix is used.

Recommendations For Xen versions 3.3.x through 4.7.x, consider restricting access to the CMPXCHG8B emulation to minimize the risk of exploitation until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-9932

DLA-964-1

DSA-3847-1

MGASA-2017-0012

OPENSUSE-SU-2017_0005-1

OPENSUSE-SU-2017_0007-1

OPENSUSE-SU-2017_0008-1

OPENSUSE-SU-2024:11520-1

SUSE-SU-2016:3207-1

SUSE-SU-2016:3208-1

SUSE-SU-2016:3221-1

SUSE-SU-2016:3241-1

SUSE-SU-2017:0718-1

Affected Products

Suse

Xen

References · 172

• https://osv.dev/vulnerability/CVE-2016-9932 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• https://support.citrix.com/article/CTX219378 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9932 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0718-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2016-9932 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3221-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3208-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3241-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0012.html · Security Note
• http://xenbits.xen.org/xsa/advisory-200.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3847-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3207-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0012 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-9932 · Security Note