PT-2016-5963 · Qemu+3 · Qemu+3

Æ强

·

Publicado

2016-06-01

·

Atualizado

2024-06-15

·

CVE-2016-4454

CVSS v3.1

6.0

Média

VetorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read in the vmsvga fifo read raw function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1937
CVE-2016-4454
DLA-1599-1
OPENSUSE-SU-2016_2494-1
OPENSUSE-SU-2016_2497-1
OPENSUSE-SU-2016_2642-1
OPENSUSE-SU-2024:10233-1
SUSE-SU-2016:2093-1
SUSE-SU-2016:2100-1
SUSE-SU-2016:2533-1
SUSE-SU-2016:2589-1
SUSE-SU-2016:2628-1
SUSE-SU-2016:2725-1
SUSE-SU-2016:2781-1
USN-3047-1
USN-3047-2

Produtos afetados

Alt Linux
Qemu
Suse
Ubuntu