Описание
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1:2.6+dfsg-3ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 2.0.0+dfsg-2ubuntu1.24 |
| esm-infra/xenial | not-affected | 1:2.5+dfsg-5ubuntu10.1 |
| precise | DNE | |
| trusty | released | 2.0.0+dfsg-2ubuntu1.24 |
| trusty/esm | not-affected | 2.0.0+dfsg-2ubuntu1.24 |
| upstream | needed | |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| wily | released | 1:2.3+dfsg-5ubuntu9.4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| precise | not-affected | code not present |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | needs-triage | |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| wily | DNE | |
| xenial | DNE |
Показывать по
EPSS
2.1 Low
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not ...
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
ELSA-2017-1856: qemu-kvm security, bug fix, and enhancement update (MODERATE)
EPSS
2.1 Low
CVSS2
6.5 Medium
CVSS3