CVE-2016-9932: Infoleak
Published Jan 26, 2017
·Updated
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
Affected Software
45 affected components
XEN Xen=3.3.0
XEN Xen=3.3.1
XEN Xen=3.3.2
XEN Xen=3.4.0
XEN Xen=3.4.1
XEN Xen=3.4.2
XEN Xen=3.4.3
XEN Xen=3.4.4
XEN Xen=4.0.0
XEN Xen=4.0.1
XEN Xen=4.0.2
XEN Xen=4.0.3
XEN Xen=4.0.4
XEN Xen=4.1.0
XEN Xen=4.1.1
XEN Xen=4.1.2
XEN Xen=4.1.3
XEN Xen=4.1.4
XEN Xen=4.1.5
XEN Xen=4.1.6
XEN Xen=4.1.6.1
XEN Xen=4.2.0
XEN Xen=4.2.1
XEN Xen=4.2.2
XEN Xen=4.2.3
XEN Xen=4.2.4
XEN Xen=4.2.5
XEN Xen=4.3.0
XEN Xen=4.3.1
XEN Xen=4.3.2
XEN Xen=4.3.3
XEN Xen=4.3.4
XEN Xen=4.4.0
XEN Xen=4.4.1
XEN Xen=4.4.2
XEN Xen=4.4.3
XEN Xen=4.4.4
XEN Xen=4.5.0
XEN Xen=4.5.1
XEN Xen=4.5.2
XEN Xen=4.5.3
XEN Xen=4.5.5
XEN Xen=4.6.0
XEN Xen=4.6.3
XEN Xen=4.7.0
Remediation
Patch Available
Event History
Jan 26, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9932?
CVE-2016-9932 has been rated as a high severity vulnerability due to its potential to expose sensitive host memory information.
2
How do I fix CVE-2016-9932?
To mitigate CVE-2016-9932, it is recommended to upgrade to Xen version 4.7 or later.
3
Who is affected by CVE-2016-9932?
CVE-2016-9932 affects local users of HVM guest operating systems running on vulnerable versions of Xen.
4
What platforms are impacted by CVE-2016-9932?
CVE-2016-9932 impacts x86 systems running Xen versions from 3.3.x to 4.7.x.
5
What type of vulnerability is CVE-2016-9932?
CVE-2016-9932 is a local information disclosure vulnerability that allows sensitive data exposure from the host stack.