UBUNTU-CVE-2016-4020

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2016-4020

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4020.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2016-4020

Related

Published

2016-04-14T00:00:00Z

Modified

2016-04-14T00:00:00Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).

References

Affected packages

Ubuntu:14.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@2.0.0+dfsg-2ubuntu1.24?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.0+dfsg-2ubuntu1.24

Affected versions

1.*

1.5.0+dfsg-3ubuntu5

1.5.0+dfsg-3ubuntu6

1.6.0+dfsg-2ubuntu1

1.6.0+dfsg-2ubuntu2

1.6.0+dfsg-2ubuntu3

1.6.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu1

1.7.0+dfsg-2ubuntu2

1.7.0+dfsg-2ubuntu3

1.7.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu5

1.7.0+dfsg-2ubuntu7

1.7.0+dfsg-2ubuntu8

1.7.0+dfsg-2ubuntu9

1.7.0+dfsg-3ubuntu1~ppa1

1.7.0+dfsg-3ubuntu1

1.7.0+dfsg-3ubuntu2

1.7.0+dfsg-3ubuntu3

1.7.0+dfsg-3ubuntu4

1.7.0+dfsg-3ubuntu5

1.7.0+dfsg-3ubuntu6

1.7.0+dfsg-3ubuntu7

2.*

2.0.0~rc1+dfsg-0ubuntu1

2.0.0~rc1+dfsg-0ubuntu2

2.0.0~rc1+dfsg-0ubuntu3

2.0.0~rc1+dfsg-0ubuntu3.1

2.0.0+dfsg-2ubuntu1

2.0.0+dfsg-2ubuntu1.1

2.0.0+dfsg-2ubuntu1.2

2.0.0+dfsg-2ubuntu1.3

2.0.0+dfsg-2ubuntu1.5

2.0.0+dfsg-2ubuntu1.6

2.0.0+dfsg-2ubuntu1.7

2.0.0+dfsg-2ubuntu1.8

2.0.0+dfsg-2ubuntu1.9

2.0.0+dfsg-2ubuntu1.10

2.0.0+dfsg-2ubuntu1.11

2.0.0+dfsg-2ubuntu1.13

2.0.0+dfsg-2ubuntu1.14

2.0.0+dfsg-2ubuntu1.15

2.0.0+dfsg-2ubuntu1.16

2.0.0+dfsg-2ubuntu1.17

2.0.0+dfsg-2ubuntu1.18

2.0.0+dfsg-2ubuntu1.19

2.0.0+dfsg-2ubuntu1.20

2.0.0+dfsg-2ubuntu1.21

2.0.0+dfsg-2ubuntu1.22

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "qemu-system-misc": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-guest-agent-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-arm-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-utils-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-user": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-kvm": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-ppc-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-aarch64": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-user-static": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-arm": "2.0.0+dfsg-2ubuntu1.24",
            "qemu": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-sparc": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-common-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-common": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-x86-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-guest-agent": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-utils": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-misc-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-sparc-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-mips-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-x86": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-ppc": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-common": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-keymaps": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-user-static-dbgsym": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-system-mips": "2.0.0+dfsg-2ubuntu1.24",
            "qemu-user-dbgsym": "2.0.0+dfsg-2ubuntu1.24"
        }
    ]
}

Ubuntu:16.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:2.5+dfsg-5ubuntu10.1?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.5+dfsg-5ubuntu10.1

Affected versions

1:2.*

1:2.3+dfsg-5ubuntu9

1:2.3+dfsg-5ubuntu10

1:2.4+dfsg-4ubuntu1

1:2.4+dfsg-4ubuntu2

1:2.4+dfsg-4ubuntu3

1:2.4+dfsg-5ubuntu3

1:2.5+dfsg-1ubuntu2

1:2.5+dfsg-1ubuntu3

1:2.5+dfsg-1ubuntu4

1:2.5+dfsg-1ubuntu5

1:2.5+dfsg-5ubuntu1

1:2.5+dfsg-5ubuntu2

1:2.5+dfsg-5ubuntu4

1:2.5+dfsg-5ubuntu6

1:2.5+dfsg-5ubuntu7

1:2.5+dfsg-5ubuntu10

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "qemu-system-misc": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-guest-agent-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-block-extra-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-utils-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-user": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-arm-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-kvm": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-ppc-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-aarch64": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-user-static": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-arm": "1:2.5+dfsg-5ubuntu10.1",
            "qemu": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-sparc": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-s390x-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-common-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-x86-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-guest-agent": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-utils": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-sparc-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-misc-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-block-extra": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-mips-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-x86": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-ppc": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-s390x": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-common": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-user-static-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-system-mips": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-user-dbgsym": "1:2.5+dfsg-5ubuntu10.1",
            "qemu-user-binfmt": "1:2.5+dfsg-5ubuntu10.1"
        }
    ]
}