6.3med
CVE-2016-7777
Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or X…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
6.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 23%
Public exploits
0
none known
Summary
Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.
Exploit prediction (EPSS)
0.30% probability of exploitation in the next 30 days, higher than 23% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.3 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N |
| NVD | 2.0 | 3.3 | AV:L/AC:M/Au:N/C:P/I:P/A:N |
Classification
- Weakness
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization
References
- support.citrix.com /article/CTX217363 · x_refsource_CONFIRM, x_transferred
- xenbits.xen.org /xsa/advisory-190.html · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/93344 · vdb-entry, x_refsource_BID, x_transferred
- security.gentoo.org /glsa/201611-09 · vendor-advisory, x_refsource_GENTOO, x_transferred
- securitytracker.com /id/1036942 · vdb-entry, x_refsource_SECTRACK, x_transferred
Sources
- CVE List: CVE-2016-7777
- NVD: CVE-2016-7777
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.