NVD

Id
19742  
Name
CVE-2016-4020  
Description
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-05-25  
Modified Date
2016-11-28  
Seq
2016-4020  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
108129 19742 CVE-2016-4020 http://git.qemu.org/?p=qemu.git;a=commit;h=691a02e2ce0c413236a78dee6f2651c937b09fb0  View
108130 19742 CVE-2016-4020 86067  View
108131 19742 CVE-2016-4020 USN-2974-1  View
108132 19742 CVE-2016-4020 https://bugzilla.redhat.com/show_bug.cgi?id=1313686  View
108133 19742 CVE-2016-4020 [qemu-devel] 20160407 [Qemu-devel] [PATCH] i386: kvmvapic: initialise imm32 variable  View
108134 19742 CVE-2016-4020 [qemu-devel] 20160407 Re: [Qemu-devel] [PATCH] i386: kvmvapic: initialise imm32 variable  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2131 JVNDB-2016-002904 QEMU の hw/i386/kvmvapic.c の patch_instruction 関数におけるホストスタックメモリから重要な情報を取得される脆弱性 QEMU の hw/i386/kvmvapic.c の patch_instruction 関数は、imm32 変数を初期化しないため、ホストスタックメモリから重要な情報を取得される脆弱性が存在します。 CVE-2016-4020 90526 CVE-2016-4020 19742 2.1 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002904.html 2016-05-23 2016-05-27 View