8.8

CVE-2016-3710

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

Data is provided by the National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version8.0
Hp ≫ Helion Openstack Version2.0.0
Hp ≫ Helion Openstack Version2.1.0
Hp ≫ Helion Openstack Version2.1.2
Hp ≫ Helion Openstack Version2.1.4
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version15.10
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Qemu ≫ Qemu Version <= 2.5.1
Qemu ≫ Qemu Version2.6.0 Updaterc0
Qemu ≫ Qemu Version2.6.0 Updaterc1
Qemu ≫ Qemu Version2.6.0 Updaterc2
Qemu ≫ Qemu Version2.6.0 Updaterc3
Qemu ≫ Qemu Version2.6.0 Updaterc4
Oracle ≫ Vm Server Version3.2 HwPlatformx86
Oracle ≫ Vm Server Version3.3 HwPlatformx86
Oracle ≫ Vm Server Version3.4 HwPlatformx86
Oracle ≫ Linux Version5 Update-
Oracle ≫ Linux Version6 Update-
Oracle ≫ Linux Version7 Update-
Citrix ≫ Xenserver Version <= 7.0
Redhat ≫ Openstack Version5.0
Redhat ≫ Openstack Version6.0
Redhat ≫ Openstack Version7.0
Redhat ≫ Openstack Version8
Redhat ≫ Virtualization Version3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.09% 0.259
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.securityfocus.com/bid/90316
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1035794
Third Party Advisory
VDB Entry