Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2016-7777 PUBLISHED CVSS 6.300000190734863 MEDIUM

Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.

Risk Scores

CVSS v3.0
6.300000190734863
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Alpine:v3.16xen4.0.1-r0, 4.0.1-r1, 4.0.1-r2
Alpine:v3.14xen0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.23xen4.7.0-r4, 0, 4.7.0-r2
Alpine:v3.10xen0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.7xen4.0.1-r0, 4.7.0-r4, 4.7.0-r3
Alpine:v3.20xen4.7.0-r4, 4.7.0-r3, 4.7.0-r2
Alpine:v3.6xen4.4.1-r7, 4.7.0-r4, 4.7.0-r3
Alpine:v3.17xen0, 4.0.1-r0, 4.0.1-r1
Alpine:v3.21xen4.7.0-r4, 0, 4.0.1-r0
Alpine:v3.18xen0, 4.7.0-r4, 4.7.0-r3
Alpine:v3.8xen4.2.0-r4, 4.0.1-r0, 4.0.1-r1
Alpine:v3.13xen4.7.0-r4, 4.7.0-r3, 4.7.0-r2
Alpine:v3.9xen4.7.0-r4, 0, 4.0.1-r0
Alpine:v3.11xen4.0.1-r2, 4.0.1-r3, 4.1.0-r0
Alpine:v3.22xen4.4.1-r6, 0, 4.7.0-r4
Alpine:v3.19xen4.2.2-r2, 4.7.0-r4, 4.7.0-r3
Alpine:v3.15xen4.3.1-r0, 4.3.0-r7, 4.3.0-r6
Alpine:v3.5xen4.4.1-r7, 4.7.0-r4, 4.7.0-r3
Alpine:v3.12xen4.7.0-r3, 4.1.2-r7, 4.1.2-r6
Alpine:v3.4xen4.2.1-r9, 4.2.1-r8, 4.2.1-r7

Timeline

References

Open in Interactive Console →