CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
CVSS Details
- CVSS 3.0 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Jan 26, 2017 |
| Debian | — | Upgrade xen | May 10, 2017 | Jan 26, 2017 |
| Freebsd | — | Upgrade xen-kernel | Dec 14, 2016 | Dec 14, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Jan 26, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 13, 2016 |
| Suse | — | Upgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade xen-doc-pdfUpgrade xen-tools-xendomains-wait-diskUpgrade xenUpgrade xen-libsUpgrade xen-doc-htmlUpgrade xen-devel | Dec 21, 2016 | Dec 21, 2016 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Jan 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub