CVE-2016-3158 in Xen
Сводка (Английский)
The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Резервировать
15.03.2016
Раскрытие
13.04.2016
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 81555 | XenSource Xen эскалация привилегий | 284 | Не определено | Официальное исправление | CVE-2016-3158 |