CVE-2016-9932 PUBLISHED

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.

EPSS 0.07% · 21.2th percentile

Risk Scores

EPSS Score
0.07%
21.2th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSxen0, 4.3.0-1ubuntu1, 4.3.0-1ubuntu2
Ubuntu:16.04:LTSxen0, 4.5.1-0ubuntu1, 4.5.1-0ubuntu2

Timeline

References

Open in Interactive Console →