CVE ID:	CVE-2016-4020
Description:	The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2016.573   1.3.6.1.4.1.25623.1.1.1.2.2016.574   1.3.6.1.4.1.25623.1.0.891599
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4020 86067 http://www.securityfocus.com/bid/86067 GLSA-201609-01 https://security.gentoo.org/glsa/201609-01 RHSA-2017:1856 https://access.redhat.com/errata/RHSA-2017:1856 RHSA-2017:2392 https://access.redhat.com/errata/RHSA-2017:2392 RHSA-2017:2408 https://access.redhat.com/errata/RHSA-2017:2408 USN-2974-1 http://www.ubuntu.com/usn/USN-2974-1 [debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html [qemu-devel] 20160407 Re: [Qemu-devel] [PATCH] i386: kvmvapic: initialise imm32 variable https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01118.html [qemu-devel] 20160407 [Qemu-devel] [PATCH] i386: kvmvapic: initialise imm32 variable https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01106.html http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=691a02e2ce0c413236a78dee6f2651c937b09fb0 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=691a02e2ce0c413236a78dee6f2651c937b09fb0 https://bugzilla.redhat.com/show_bug.cgi?id=1313686 https://bugzilla.redhat.com/show_bug.cgi?id=1313686