The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-debuginfo | Aug 28, 2019 | May 25, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | May 25, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 25, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | May 25, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Nov 30, 2017 | May 25, 2016 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-tools | Aug 8, 2017 | Apr 7, 2016 |
| Redhat_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-img | Aug 5, 2017 | May 25, 2016 |
| Suse | — | Upgrade qemu-ui-spice-appUpgrade xen-doc-htmlUpgrade qemu-ui-spice-coreUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemu-ui-openglUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade qemu-audio-alsaUpgrade qemu-armUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade kvmUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade xen-toolsUpgrade xenUpgrade qemu-microvmUpgrade xen-libs-32bitUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemuUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade xen-libsUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemu-hw-display-qxl | Jun 13, 2016 | May 25, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-kvm | May 12, 2016 | May 12, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub