CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2016-4020

The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).

Score
6.5 medium
Published
2016-05-25
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
emulators/qemu-cheriqemu-cheri0.d20260108unaddressedbrooks@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>qemu-cheri</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not
	initialize the imm32 variable, which allows local guest OS
	administrators to obtain sensitive information from host stack memory
	by accessing the Task Priority Register (TPR).</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2016-4020</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2016-4020</url>
    </references>
    <dates>
      <discovery>2016-05-25</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>