CVE-2013-1442

2013-09-3000:00:00

ubuntu.com

0.001 Low

EPSS

Percentile

24.7%

JSON

Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not
properly clear previous data from registers when using an XSAVE or XRSTOR
to extend the state components of a saved or restored vCPU after touching
other restored extended registers, which allows local guest OSes to obtain
sensitive information by reading the registers.

Notes

Author	Note
seth-arnold	Problem can be mitigated with the “no-xsave” hypervisor command line option, which should be the default in 12.04 LTS and 12.10.
mdeslaur	This is XSA-62

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxen< 4.1.5-0ubuntu0.12.04.2UNKNOWN
ubuntu12.10noarchxen< 4.1.5-0ubuntu0.12.10.2UNKNOWN
ubuntu13.04noarchxen< 4.2.2-0ubuntu0.13.04.2UNKNOWN
ubuntu13.10noarchxen< 4.3.0-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	xen	< 4.1.5-0ubuntu0.12.04.2	UNKNOWN
ubuntu	12.10	noarch	xen	< 4.1.5-0ubuntu0.12.10.2	UNKNOWN
ubuntu	13.04	noarch	xen	< 4.2.2-0ubuntu0.13.04.2	UNKNOWN
ubuntu	13.10	noarch	xen	< 4.3.0-1ubuntu1.1	UNKNOWN