CVE

Id
62023  
CVE No.
CVE-2013-2076  
Status
Candidate  
Description
Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one domain to determine portions of the state of floating point instructions of other domains, which can be leveraged to obtain sensitive information such as cryptographic keys, a similar vulnerability to CVE-2006-1056. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620835 62023 CVE-2013-2076 MLIST:[oss-security] 20130603 Xen Security Advisory 52 (CVE-2013-2076) - Information leak on XSAVE/XRSTOR capable AMD CPUs  View
620836 62023 CVE-2013-2076 URL:http://www.openwall.com/lists/oss-security/2013/06/03/1  View
620837 62023 CVE-2013-2076 DEBIAN:DSA-3006  View
620838 62023 CVE-2013-2076 URL:http://www.debian.org/security/2014/dsa-3006  View
620839 62023 CVE-2013-2076 GENTOO:GLSA-201309-24  View
620840 62023 CVE-2013-2076 URL:http://security.gentoo.org/glsa/glsa-201309-24.xml  View
620841 62023 CVE-2013-2076 SUSE:SUSE-SU-2014:0446  View
620842 62023 CVE-2013-2076 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html  View
620843 62023 CVE-2013-2076 SECUNIA:55082  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21244 JVNDB-2013-002819 Moodle における重要なサイト情報を取得される脆弱性 Moodle は、ハブへの登録の間、送信しない (don"t send) 属性を配慮しないため、重要なサイト情報を取得される脆弱性が存在します。 CVE-2013-2081 62023 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002819.html  View