CVE:CVE-2016-4020
CNNVD:CNNVD-201604-329
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU存在信息泄露漏洞，该漏洞源于程序没有初始化imm32变量。本地攻击者可通过该漏洞获取主机栈内存中的敏感信息。
solution:Upgrade qemu qemu to a higher version than 2.6.2,and avoid the version (,2.6.2]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat openstack to a higher version than 6.0,7.0,8,9,10,11,and avoid the version 6.0,7.0,8,9,10,11; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.4,7.5,7.6,7.7,and avoid the version 7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,7.7,and avoid the version 7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0