6.5

CVE-2016-4020

The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qemu ≫ Qemu Version <= 2.6.2
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 15.10
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Debian ≫ Debian Linux Version 8.0
Redhat ≫ Openstack Version 6.0
Redhat ≫ Openstack Version 7.0
Redhat ≫ Openstack Version 8
Redhat ≫ Openstack Version 9
Redhat ≫ Openstack Version 10
Redhat ≫ Openstack Version 11
Redhat ≫ Enterprise Linux Eus Version 7.4
Redhat ≫ Enterprise Linux Eus Version 7.5
Redhat ≫ Enterprise Linux Eus Version 7.6
Redhat ≫ Enterprise Linux Eus Version 7.7
Redhat ≫ Virtualization Version 4.0
   Redhat ≫ Enterprise Linux Version 7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.291
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2 4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.ubuntu.com/usn/USN-2974-1
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
Third Party Advisory
Mailing List
https://security.gentoo.org/glsa/201609-01
Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=691a02e2ce0c413236a78dee6f2651c937b09fb0
http://www.securityfocus.com/bid/86067
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1856
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2392
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2408
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1313686
Third Party Advisory
Issue Tracking
https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01106.html
Patch
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01118.html
Patch
Third Party Advisory