NetSight
IP …
medium5.5

CVE-2016-3712

Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA …

Impact

Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.

Affected products

VendorProductAffected versions
OracleVm Server
Versions 3.3, 3.4
QemuQemu
through 2.5.1
Version 2.6.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
DebianDebian Linux
Version 8.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
CitrixXenserver
through 7.0

Weakness classification

CWE-190

References