CVE-2016-3712

The CVE-2016-3712 issue affects QEMU’s VGA emulator (VBE mode) where an integer overflow/out-of-bounds read occurs when editing VGA registers, enabling a privileged guest to crash the QEMU host process (DoS). Multiple connected advisories reference this CVE as part of a set of QEMU/VGA vulnerabil...

CVE-2016-3712

Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service out-of-bounds read and QEMU process crash by editing VGA registers in VBE mode...

CVE-2016-3710

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue...

RHEL 6 : qemu-kvm (RHSA-2016:0997)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0997 advisory. - qemu: incorrect banked access bounds checking in vga module CVE-2016-3710 Note that Nessus has not tested for this issue but has instead relied onl...

QEMU VGA Module Denial of Service Vulnerability (CNVD-2016-03097)

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the VGA module of QEMU. An attacker could exploit this vulnerability to cause a denial of service QEMU process crash, intege...

[SECURITY] [DSA 3573-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3573-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 09, 2016 https://www.debian.org/security/faq -...

CVE-2016-3712

Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service out-of-bounds read and QEMU process crash by editing VGA registers in VBE mode...

qemu-kvm security update

1.5.3-105.el72.4 - kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch bz1331412 - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch bz1331412 - kvm-vga-add-vbeenabled-helper.patch bz1331412 - kvm-vga-factor-out-vga-register-setup.patch bz1331412 -...