Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-3159

The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.

Published

2016-04-13T16:59:19.507

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 3.8 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:S/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.1

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200
    CWE-284
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System oracle vm_server 3.3 Yes
Operating System oracle vm_server 3.4 Yes
Operating System xen xen ≤ 4.3.4 Yes
Operating System xen xen ≤ 4.4.4 Yes
Operating System xen xen ≤ 4.5.3 Yes
Operating System xen xen ≤ 4.6.1 Yes
Operating System fedoraproject fedora 22 Yes
Operating System fedoraproject fedora 23 Yes
Operating System debian debian_linux 8.0 Yes
References