Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-3710

Опубликовано: 11 мая 2016
Источник: ubuntu
Приоритет: medium
CVSS2: 7.2
CVSS3: 8.8

Описание

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

РелизСтатусПримечание
devel

not-affected

1:2.6+dfsg-3ubuntu1
esm-infra-legacy/trusty

released

2.0.0+dfsg-2ubuntu1.24
esm-infra/xenial

released

1:2.5+dfsg-5ubuntu10.1
precise

DNE

trusty

released

2.0.0+dfsg-2ubuntu1.24
trusty/esm

released

2.0.0+dfsg-2ubuntu1.24
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

released

1:2.3+dfsg-5ubuntu9.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

released

1.0+noroms-0ubuntu14.28
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

DNE

xenial

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

code not compiled
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [4.4.2-0ubuntu0.14.04.6]]
esm-infra/xenial

not-affected

code not compiled
precise

released

4.1.6.1-0ubuntu0.12.04.11
trusty

released

4.4.2-0ubuntu0.14.04.6
trusty/esm

DNE

trusty was released [4.4.2-0ubuntu0.14.04.6]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

not-affected

code not compiled

Показывать по

7.2 High

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.6
redhat
больше 9 лет назад

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

CVSS3: 8.8
nvd
больше 9 лет назад

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

CVSS3: 8.8
debian
больше 9 лет назад

The VGA module in QEMU improperly performs bounds checking on banked a ...

CVSS3: 8.8
github
больше 3 лет назад

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

oracle-oval
больше 9 лет назад

ELSA-2016-0997: qemu-kvm security update (IMPORTANT)

7.2 High

CVSS2

8.8 High

CVSS3