NVD

Id
38187  
Name
CVE-2013-2076  
Description
Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one domain to determine portions of the state of floating point instructions of other domains, which can be leveraged to obtain sensitive information such as cryptographic keys, a similar vulnerability to CVE-2006-1056. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
2.5  
CVSS Vector
(AV:A/AC:H/Au:S/C:C/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-08-28  
Modified Date
2014-12-11  
Seq
2013-2076  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195243 38187 CVE-2013-2076 SUSE-SU-2014:0446  View
195244 38187 CVE-2013-2076 GLSA-201309-24  View
195245 38187 CVE-2013-2076 DSA-3006  View
195246 38187 CVE-2013-2076 [oss-security] 20130603 Xen Security Advisory 52 (CVE-2013-2076) - Information leak on XSAVE/XRSTOR capable AMD CPUs  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22344 JVNDB-2013-003919 Xen における他のドメインの浮動小数点命令の状態の割り当てを見つけられる脆弱性 Xen は、AMD64 プロセッサ上で実行する場合、例外が保留された際の FXSAVE/FXRSTOR の FOP、FIP、FDP x87 レジスタをただ保存／復元のみする (only save/restore) ため、他のドメインの浮動小数点命令の状態の割り当てを見つけられ、暗号鍵などの重要な情報の取得に利用される脆弱性が存在します。 CVE-2013-2076 62018 CVE-2013-2076 38187 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003919.html 2013-06-03 2013-11-08 View