Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-9845

Опубликовано: 29 дек. 2016
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 2.1
CVSS3: 6.5

Описание

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.

РелизСтатусПримечание
devel

not-affected

1:2.8+dfsg-3ubuntu2
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/xenial

released

1:2.5+dfsg-5ubuntu10.11
precise

DNE

trusty

not-affected

code not present
trusty/esm

not-affected

code not present
upstream

needed

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

released

1:2.5+dfsg-5ubuntu10.11

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

code not present
trusty

DNE

trusty/esm

DNE

upstream

needed

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

EPSS

Процентиль: 27%
0.00095
Низкий

2.1 Low

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.1
redhat
больше 9 лет назад

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.

CVSS3: 6.5
nvd
около 9 лет назад

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.

CVSS3: 6.5
debian
около 9 лет назад

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator su ...

CVSS3: 6.5
github
больше 3 лет назад

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.

fstec
около 9 лет назад

Уязвимость эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему

EPSS

Процентиль: 27%
0.00095
Низкий

2.1 Low

CVSS2

6.5 Medium

CVSS3