PT-2016-5808 · Qemu Team+5 · Qemu+5

Donghai Zdh

·

Publicado

2016-04-14

·

Atualizado

2024-06-15

·

CVE-2016-4020

CVSS v3.1

6.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue concerns the patch instruction function in hw/i386/kvmvapic.c which does not initialize the imm32 variable. This allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2017-1043
CESA-2017_1856
CVE-2016-4020
DLA-1599-1
DLA-573-1
DLA-574-1
MGASA-2016-0176
OPENSUSE-SU-2016_1750-1
OPENSUSE-SU-2016_2494-1
OPENSUSE-SU-2016_2497-1
OPENSUSE-SU-2024:10233-1
OPENSUSE-SU-2024:10285-1
RHSA-2017:1856
RHSA-2017:2392
RHSA-2017:2408
RHSA-2017_1856
SUSE-SU-2016:1560-1
SUSE-SU-2016:1698-1
SUSE-SU-2016:1703-1
SUSE-SU-2016:1785-1
SUSE-SU-2016:2093-1
SUSE-SU-2016:2100-1
SUSE-SU-2016:2533-1
USN-2974-1

Produtos afetados

Alt Linux
Centos
Qemu
Red Hat
Suse
Ubuntu