NetSight
IP …
high8.8

CVE-2016-3710

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary co…

Impact

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 8.0
HpHelion Openstack
Versions 2.0.0, 2.1.0, 2.1.2, 2.1.4
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
QemuQemu
through 2.5.1
Version 2.6.0
OracleVm Server
Versions 3.2, 3.3, 3.4
OracleLinux
Versions 5, 6, 7
CitrixXenserver
through 7.0
RedhatOpenstack
Versions 5.0, 6.0, 7.0, 8
RedhatVirtualization
Version 3.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.3, 7.4, 7.6

Weakness classification

CWE-119

References