CVE-2016-3710

EPSS 0.92%
Veröffentlicht 11.05.2016 21:59:01
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 25

NVD 47 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Debian ≫ Debian Linux Version 8.0

Hp ≫ Helion Openstack Version 2.0.0

Hp ≫ Helion Openstack Version 2.1.0

Hp ≫ Helion Openstack Version 2.1.2

Hp ≫ Helion Openstack Version 2.1.4

Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 15.10

Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts

Qemu ≫ Qemu Version <= 2.5.1

Qemu ≫ Qemu Version 2.6.0 Update rc0

Qemu ≫ Qemu Version 2.6.0 Update rc1

Qemu ≫ Qemu Version 2.6.0 Update rc2

Qemu ≫ Qemu Version 2.6.0 Update rc3

Qemu ≫ Qemu Version 2.6.0 Update rc4

Oracle ≫ Vm Server Version 3.2 HwPlatform x86

Oracle ≫ Vm Server Version 3.3 HwPlatform x86

Oracle ≫ Vm Server Version 3.4 HwPlatform x86

Oracle ≫ Linux Version 5 Update -

Oracle ≫ Linux Version 6 Update -

Oracle ≫ Linux Version 7 Update -

Citrix ≫ Xenserver Version <= 7.0

Redhat ≫ Openstack Version 5.0

Redhat ≫ Openstack Version 6.0

Redhat ≫ Openstack Version 7.0

Redhat ≫ Openstack Version 8

Redhat ≫ Virtualization Version 3.0

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Server Aus Version 7.2

Redhat ≫ Enterprise Linux Server Aus Version 7.3

Redhat ≫ Enterprise Linux Server Aus Version 7.4

Redhat ≫ Enterprise Linux Server Aus Version 7.6

Redhat ≫ Enterprise Linux Server Eus Version 7.2

Redhat ≫ Enterprise Linux Server Eus Version 7.3

Redhat ≫ Enterprise Linux Server Eus Version 7.4

Redhat ≫ Enterprise Linux Server Eus Version 7.5

Redhat ≫ Enterprise Linux Server Eus Version 7.6

Redhat ≫ Enterprise Linux Server Eus Version 7.7

Redhat ≫ Enterprise Linux Server Tus Version 7.2

Redhat ≫ Enterprise Linux Server Tus Version 7.3

Redhat ≫ Enterprise Linux Server Tus Version 7.6

Redhat ≫ Enterprise Linux Server Tus Version 7.7

Redhat ≫ Enterprise Linux Workstation Version 6.0

Redhat ≫ Enterprise Linux Workstation Version 7.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.92%	0.557

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2	6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Third Party Advisory

http://www.ubuntu.com/usn/USN-2974-1

Third Party Advisory

http://support.citrix.com/article/CTX212736

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862

Third Party Advisory

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-0724.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0725.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0997.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0999.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1000.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1001.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1002.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1019.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1943.html

Third Party Advisory

http://www.debian.org/security/2016/dsa-3573

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/05/09/3

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/90316

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1035794

Third Party Advisory

VDB Entry

http://xenbits.xen.org/xsa/advisory-179.html

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1224

Third Party Advisory

https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg01197.html

Patch

Third Party Advisory

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2016-3710

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-3710

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-3710

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-3710