CVE-2016-9932

Published: Jan 26, 2017Modified: May 13, 2026

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.

Affected (45)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 3.3.0
Xen Xen	Version 3.3.1
Xen Xen	Version 3.3.2
Xen Xen	Version 3.4.0
Xen Xen	Version 3.4.1
Xen Xen	Version 3.4.2
Xen Xen	Version 3.4.3
Xen Xen	Version 3.4.4
Xen Xen	Version 4.0.0
Xen Xen	Version 4.0.1
Xen Xen	Version 4.0.2
Xen Xen	Version 4.0.3
Xen Xen	Version 4.0.4
Xen Xen	Version 4.1.0
Xen Xen	Version 4.1.1
Xen Xen	Version 4.1.2
Xen Xen	Version 4.1.3
Xen Xen	Version 4.1.4
Xen Xen	Version 4.1.5
Xen Xen	Version 4.1.6.1
Xen Xen	Version 4.1.6
Xen Xen	Version 4.2.0
Xen Xen	Version 4.2.1
Xen Xen	Version 4.2.2
Xen Xen	Version 4.2.3
Xen Xen	Version 4.2.4
Xen Xen	Version 4.2.5
Xen Xen	Version 4.3.0
Xen Xen	Version 4.3.1
Xen Xen	Version 4.3.2
Xen Xen	Version 4.3.3
Xen Xen	Version 4.3.4
Xen Xen	Version 4.4.0
Xen Xen	Version 4.4.1
Xen Xen	Version 4.4.2
Xen Xen	Version 4.4.3
Xen Xen	Version 4.4.4
Xen Xen	Version 4.5.0
Xen Xen	Version 4.5.1
Xen Xen	Version 4.5.2
Xen Xen	Version 4.5.3
Xen Xen	Version 4.5.5
Xen Xen	Version 4.6.0
Xen Xen	Version 4.6.3
Xen Xen	Version 4.7.0