vulnerability

Ubuntu: (CVE-2016-9932): xen vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:N/A:N)

Published

Jan 26, 2017

Added

Nov 19, 2024

Modified

Apr 16, 2026

Description

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.

Solution

ubuntu-upgrade-xen

References

CVE-2016-9932
https://attackerkb.com/topics/CVE-2016-9932
CWE-200
DEBIAN-DSA-3847
DISA_SEVERITY-Category I
EUVD-EUVD-2016-10719
IAVM-2016-B-0190
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-10719
https://www.cve.org/CVERecord?id=CVE-2016-9932
https://xenbits.xen.org/xsa/advisory-200.html

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report