CVE-2016-3158

LowCVSS 3.8/10Last modified Jun 17, 2026

Description

The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.

Metrics

CVSS 3.0 3.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

CWE-200 CWE-284

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181699.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181729.htmlThird Party Advisory
http://support.citrix.com/article/CTX209443
http://www.debian.org/security/2016/dsa-3554
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlVendor Advisory
http://www.securityfocus.com/bid/85714Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035435Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-172.htmlVendor Advisory
http://xenbits.xen.org/xsa/xsa172-4.3.patchPatch
http://xenbits.xen.org/xsa/xsa172.patchPatch
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181699.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181729.htmlThird Party Advisory
http://support.citrix.com/article/CTX209443
http://www.debian.org/security/2016/dsa-3554
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlVendor Advisory
http://www.securityfocus.com/bid/85714Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035435Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-172.htmlVendor Advisory
http://xenbits.xen.org/xsa/xsa172-4.3.patchPatch
http://xenbits.xen.org/xsa/xsa172.patchPatch

Timeline

Published: Apr 13, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-31593.8The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 proc CVE-2016-31617.8For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the CVE-2016-31628.1The File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows remote authenticated users to bypass access restrictions and read, del CVE-2016-31637.5The XML-RPC system in Drupal 6.x before 6.38 and 7.x before 7.43 might make it easier for remote attackers to conduct brute-force attacks vi CVE-2016-31647.4Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1 CVE-2016-31657.5The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended CVE-2016-31665.9CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote att CVE-2016-31677.4Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers CVE-2016-31686.4The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administra CVE-2016-31698.1The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom CVE-2016-31705.3The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obt CVE-2016-31718.1Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execu