CVE-2013-2076 Information disclosure in n/a
A local attacker in a Xen guest can read floating-point state from other guests, potentially exposing sensitive data like cryptographic keys.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-2076?
CVE-2013-2076 is a medium-severity vulnerability in Xen Xen, published on 28 Aug 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one domain to determine portions of the state of floating point instructions of other domains, which can be leveraged to obtain sensitive information such as cryptographic keys, a similar vulnerability to CVE-2006-1056. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
Weakness: CWE-200
Which versions are affected by CVE-2013-2076?
It affects 1 product.
Products include Xen Xen.
How do I fix CVE-2013-2076?
Apply the vendor's patch.
Is CVE-2013-2076 being exploited?
There is no known exploitation of CVE-2013-2076 in the wild and no public exploit code.
Other vulnerabilities in Xen Xen
Sources
Also known as DEBIAN-CVE-2013-2076, GHSA-86c3-896f-hgp9.