VDB
ALPINE-CVE-2016-7777
ALPINE-CVE-2016-7777
PUBLISHED
CVSS 6.300000190734863 MEDIUM
Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.
Risk Scores
CVSS 3.0
6.300000190734863
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.16 | xen | 4.7.0-r4, 0, 4.0.1-r0 |
| Alpine:v3.14 | xen | 0, 4.7.0-r4, 4.7.0-r3 |
| Alpine:v3.23 | xen | 4.4.1-r5, 0, 4.0.1-r0 |
| Alpine:v3.10 | xen | 4.7.0-r4, 0, 0 |
| Alpine:v3.7 | xen | 0, 4.7.0-r4, 4.7.0-r3 |
| Alpine:v3.20 | xen | 4.2.0-r6, 0, 4.0.1-r0 |
| Alpine:v3.6 | xen | 4.0.1-r1, 0, 4.7.0-r4 |
| Alpine:v3.17 | xen | 0, 4.0.1-r0, 4.0.1-r3 |
| Alpine:v3.21 | xen | 4.2.2-r7, 0, 4.7.0-r4 |
| Alpine:v3.18 | xen | 4.3.0-r2, 4.0.1-r3, 0 |
| Alpine:v3.8 | xen | 4.7.0-r4, 4.0.1-r0, 4.0.1-r1 |
| Alpine:v3.13 | xen | 4.2.0-r5, 0, 4.0.1-r0 |
| Alpine:v3.24 | xen | 0 |
| Alpine:v3.9 | xen | 4.0.1-r1, 4.0.1-r2, 4.0.1-r3 |
| Alpine:v3.11 | xen | 4.4.1-r2, 0, 0 |
| Alpine:v3.22 | xen | 4.3.3-r0, 4.0.1-r1, 0 |
| Alpine:v3.19 | xen | 0, 0, 4.0.1-r1 |
| Alpine:v3.15 | xen | 0, 4.7.0-r3, 4.7.0-r2 |
| Alpine:v3.5 | xen | 4.1.2-r6, 4.7.0-r4, 4.7.0-r3 |
| Alpine:v3.12 | xen | 0, 4.2.0-r0, 4.1.2-r5 |
…and 1 more
Timeline
- Oct 7, 2016 CVE Published
- Apr 30, 2026 Distribution Patch
- Jun 9, 2026 CVE Updated