CVE-2016-3159

The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.

Published : 2016-04-13 16:59 Updated : 2019-02-21 17:42

1.7
CVSS Score More info
Score 1.7 / 10
1.7
Vendor Product Version URI
Debian Debian Linux 8.0 cpe:/o:debian:debian_linux:8.0
Xen Xen 4.6.0 cpe:/o:xen:xen:4.6.0
Xen Xen 4.6.1 cpe:/o:xen:xen:4.6.1
Fedoraproject Fedora 22 cpe:/o:fedoraproject:fedora:22
Fedoraproject Fedora 23 cpe:/o:fedoraproject:fedora:23
Oracle Vm Server 3.4 cpe:/o:oracle:vm_server:3.4
Oracle Vm Server 3.3 cpe:/o:oracle:vm_server:3.3
  1. Xen (1) Search CVE
    1. Xen (2) Search CVE
      1. 4.6.0
      2. 4.6.1
  2. Debian (1) Search CVE
    1. Debian Linux (1) Search CVE
      1. 8.0
  3. Fedoraproject (1) Search CVE
    1. Fedora (2) Search CVE
      1. 22
      2. 23
  4. Oracle (1) Search CVE
    1. Vm Server (2) Search CVE
      1. 3.4
      2. 3.3

CWE

ID Name Description Links
CWE-284 Improper Access Control The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor. CVE
CWE-200 Information Exposure An information exposure is the intentional or unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information. CVE

History of changes

Date Event
2019-02-21 17:42
2016-04-13 16:59

New CVE