CVE-2013-1442

Name	CVE-2013-1442
Description	Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain sensitive information by reading the registers.
Source	CVE (at NVD; oss-sec, fulldisc, OSVDB, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, more)
References	DSA-3006-1
NVD severity	low (attack range: local)
Debian/oldstable	package xen is vulnerable.
Debian/stable	not vulnerable.
Debian/testing	not vulnerable.
Debian/unstable	not vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
xen (PTS)	squeeze (security), squeeze	4.0.1-5.11	vulnerable
	wheezy	4.1.4-3+deb7u3	fixed
	wheezy (security)	4.1.4-3+deb7u4	fixed
	jessie	4.4.1-6	fixed
	sid	4.4.1-7	fixed

The information above is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
xen	source	(unstable)	4.4.0-1	low
xen	source	squeeze	(unfixed)	end-of-life
xen	source	wheezy	4.1.4-3+deb7u2	low	DSA-3006-1

Notes

[squeeze] - xen <end-of-life> (Unsupported in squeeze-lts)
advisory say: In Xen 4.0.2 through 4.0.4 as well as in Xen 4.1.x XSAVE support is disabled by default