CVE-2016-9932

Name
CVE-2016-9932
Description
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cve@mitre.org http://www.debian.org/security/2017/dsa-3847
Third Party Advisory http://www.securityfocus.com/bid/94863
Third Party Advisory http://www.securitytracker.com/id/1037468
Patch http://xenbits.xen.org/xsa/advisory-200.html
cve@mitre.org https://security.gentoo.org/glsa/201612-56
Vendor Advisory https://support.citrix.com/article/CTX219378

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:* xen == None == 3.3.0
cpe:2.3:o:xen:xen:3.3.1:*:*:*:*:*:*:* xen == None == 3.3.1
cpe:2.3:o:xen:xen:3.3.2:*:*:*:*:*:*:* xen == None == 3.3.2
cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:* xen == None == 3.4.0
cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:* xen == None == 3.4.1
cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:* xen == None == 3.4.2
cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:* xen == None == 3.4.3
cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:* xen == None == 3.4.4
cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:* xen == None == 4.0.0
cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:* xen == None == 4.0.1
cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:* xen == None == 4.0.2
cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:* xen == None == 4.0.3
cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:* xen == None == 4.0.4
cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:* xen == None == 4.1.0
cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:* xen == None == 4.1.1
cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:* xen == None == 4.1.2
cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:* xen == None == 4.1.3
cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:* xen == None == 4.1.4
cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:* xen == None == 4.1.5
cpe:2.3:o:xen:xen:4.1.6:*:*:*:*:*:*:* xen == None == 4.1.6
cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:* xen == None == 4.1.6.1
cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:* xen == None == 4.2.0
cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:* xen == None == 4.2.1
cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:* xen == None == 4.2.2
cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:* xen == None == 4.2.3
cpe:2.3:o:xen:xen:4.2.4:*:*:*:*:*:*:* xen == None == 4.2.4
cpe:2.3:o:xen:xen:4.2.5:*:*:*:*:*:*:* xen == None == 4.2.5
cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:* xen == None == 4.3.0
cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:* xen == None == 4.3.1
cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:* xen == None == 4.3.2
cpe:2.3:o:xen:xen:4.3.3:*:*:*:*:*:*:* xen == None == 4.3.3
cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:* xen == None == 4.3.4
cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:* xen == None == 4.4.0
cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:* xen == None == 4.4.1
cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:* xen == None == 4.4.2
cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:* xen == None == 4.4.3
cpe:2.3:o:xen:xen:4.4.4:*:*:*:*:*:*:* xen == None == 4.4.4
cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:* xen == None == 4.5.0
cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:* xen == None == 4.5.1
cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:* xen == None == 4.5.2
cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:* xen == None == 4.5.3
cpe:2.3:o:xen:xen:4.5.5:*:*:*:*:*:*:* xen == None == 4.5.5
cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:* xen == None == 4.6.0
cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:* xen == None == 4.6.3
cpe:2.3:o:xen:xen:4.7.0:*:*:*:*:*:*:* xen == None == 4.7.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
xen edge-main 4.7.1-r3 None fixed
xen edge-main 4.7.0-r5 None possibly vulnerable
xen edge-main 4.7.0-r1 None possibly vulnerable
xen edge-main 4.7.0-r0 None possibly vulnerable
xen 3.22-main 4.7.1-r3 None fixed
xen 3.22-main 4.7.0-r5 None possibly vulnerable
xen 3.22-main 4.7.0-r1 None possibly vulnerable
xen 3.22-main 4.7.0-r0 None possibly vulnerable
xen 3.21-main 4.7.1-r3 None fixed
xen 3.21-main 4.7.0-r5 None possibly vulnerable
xen 3.21-main 4.7.0-r1 None possibly vulnerable
xen 3.21-main 4.7.0-r0 None possibly vulnerable
xen 3.20-main 4.7.1-r3 None fixed
xen 3.20-main 4.7.0-r5 None possibly vulnerable
xen 3.20-main 4.7.0-r1 None possibly vulnerable
xen 3.20-main 4.7.0-r0 None possibly vulnerable
xen 3.19-main 4.7.1-r3 None fixed
xen 3.19-main 4.7.0-r5 None possibly vulnerable
xen 3.19-main 4.7.0-r1 None possibly vulnerable
xen 3.19-main 4.7.0-r0 None possibly vulnerable
xen 3.18-main 4.7.1-r3 None fixed
xen 3.17-main 4.7.1-r3 None fixed
xen 3.12-main 4.7.1-r3 None fixed
xen 3.11-main 4.7.1-r3 None fixed
xen 3.10-main 4.7.1-r3 None fixed