CVE-2016-9932

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.

Metrics

CVSS 3.0 3.3/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2017/dsa-3847
http://www.securityfocus.com/bid/94863Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037468Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-200.htmlPatch, Vendor Advisory
https://security.gentoo.org/glsa/201612-56
https://support.citrix.com/article/CTX219378Vendor Advisory
http://www.debian.org/security/2017/dsa-3847
http://www.securityfocus.com/bid/94863Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037468Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-200.htmlPatch, Vendor Advisory
https://security.gentoo.org/glsa/201612-56
https://support.citrix.com/article/CTX219378Vendor Advisory

Timeline

Published: Jan 26, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-99337.5Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in CVE-2016-99347.5ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) v CVE-2016-99359.8The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial o CVE-2016-99369.8The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-afte CVE-2016-99377.5An issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1. If an SDP offer or answer is rece CVE-2016-99385.3An issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14.x before 14.2.1 and Certified Asterisk 11.x CVE-2016-99397.5Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library will allocate a memory block ba CVE-2016-99419.8Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (a CVE-2016-99429.8Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (appl CVE-2016-99497.8An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python c CVE-2016-99507.8An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fiel CVE-2016-99516.5An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmd