ISOMAN

CVE

CVE-2016-3710

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

Severity
HIGH
CVSS
8.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://rhn.redhat.com/errata/RHSA-2016-0724.html
  2. http://rhn.redhat.com/errata/RHSA-2016-0725.html
  3. http://rhn.redhat.com/errata/RHSA-2016-0997.html
  4. http://rhn.redhat.com/errata/RHSA-2016-0999.html
  5. http://rhn.redhat.com/errata/RHSA-2016-1000.html
  6. http://rhn.redhat.com/errata/RHSA-2016-1001.html
  7. http://rhn.redhat.com/errata/RHSA-2016-1002.html
  8. http://rhn.redhat.com/errata/RHSA-2016-1019.html
  9. http://rhn.redhat.com/errata/RHSA-2016-1943.html
  10. http://support.citrix.com/article/CTX212736
  11. http://www.debian.org/security/2016/dsa-3573
  12. http://www.openwall.com/lists/oss-security/2016/05/09/3
  13. http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
  14. http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
  15. http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
  16. http://www.securityfocus.com/bid/90316
  17. http://www.securitytracker.com/id/1035794
  18. http://www.ubuntu.com/usn/USN-2974-1
  19. http://xenbits.xen.org/xsa/advisory-179.html
  20. https://access.redhat.com/errata/RHSA-2016:1224