VDB
CVE-2016-3159
CVE-2016-3159
PUBLISHED
CVSS 3.799999952316284 LOW
The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.
EPSS 0.40% · 31.5th percentile
Risk Scores
CVSS 3.0
3.799999952316284
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
EPSS Score
0.40%
31.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | xen | 0, 4.5.1-0ubuntu1, 4.6.0-1ubuntu1 |
| Ubuntu:14.04:LTS | xen | 0, 4.3.0-1ubuntu1, 4.3.0-1ubuntu2 |
Timeline
- Apr 13, 2016 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 29, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2016-3159 third-party-advisory
- http://xenbits.xen.org/xsa/advisory-172.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2016-3159 third-party-advisory