CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a “supposedly-ignored” operand size prefix.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9932
Reference (s):
- BID:94863
- URL: http://www.securityfocus.com/bid/94863
- http://xenbits.xen.org/xsa/advisory-200.html
- https://support.citrix.com/article/CTX219378
- DEBIAN:DSA-3847