NVD

Id
19004  
Name
CVE-2016-3158  
Description
The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.  
Reject
 
CVSS Version
2  
CVSS Score
1.7  
Severity
Low  
CVSS Base Score
1.7  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-12-02  
Seq
2016-3158  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
105438 19004 CVE-2016-3158 FEDORA-2016-5f196e4e4a  View
105439 19004 CVE-2016-3158 FEDORA-2016-e5432ca977  View
105440 19004 CVE-2016-3158 http://support.citrix.com/article/CTX209443  View
105441 19004 CVE-2016-3158 DSA-3554  View
105442 19004 CVE-2016-3158 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
105443 19004 CVE-2016-3158 85714  View
105444 19004 CVE-2016-3158 1035435  View
105445 19004 CVE-2016-3158 http://xenbits.xen.org/xsa/advisory-172.html  View
105446 19004 CVE-2016-3158 http://xenbits.xen.org/xsa/xsa172-4.3.patch  View
105447 19004 CVE-2016-3158 http://xenbits.xen.org/xsa/xsa172.patch  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1363 JVNDB-2016-002136 Xen の arch/x86/xstate.c の xrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 Xen の arch/x86/xstate.c の xrstor 関数は、AMD64 プロセッサ上で稼動する場合、ハードウェアの FSW.ES ビットへの書き込みを適切に処理しないため、他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性が存在します。 CVE-2016-3158 89664 CVE-2016-3158 19004 1.7 3.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002136.html 2016-03-24 2016-11-17 View