CVE-2016-10029

CVE-2016-10029 affects QEMU’s Virtio GPU Device emulator (virtio_gpu). The vulnerability is an out-of-bounds read in the virtio_gpu_set_scanout handler when a VIRTIO_GPU_CMD_SET_SCANOUT command uses a scanout id larger than num_scanouts. This local-privilege level issue can cause a guest user to ...

CVE-2016-10028

CVE-2016-10028 affects QEMU with Virtio GPU Device emulator support. The flaw is in virgl_cmd_get_capset (hw/display/virtio-gpu-3d.c) where processing a VIRTIO_GPU_CMD_GET_CAPSET with a max capabilities size of 0 allows an unprivileged local guest user to trigger an out-of-bounds read, crash the ...

CVE-2016-10028

The virglcmdgetcapset function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a VIRTIOGPUCMDGETCAPSET command with a maximum capabilities size...

CVE-2016-10029

The virtiogpusetscanout function in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a scanout id in a VIRTIOGPUCMDSETSCANOUT command larger than numscanouts...

CVE-2016-10028

The virglcmdgetcapset function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a VIRTIOGPUCMDGETCAPSET command with a maximum capabilities size...

CVE-2016-10029

The virtiogpusetscanout function in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a scanout id in a VIRTIOGPUCMDSETSCANOUT command larger than numscanouts...

CVE-2016-10029

The virtiogpusetscanout function in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a scanout id in a VIRTIOGPUCMDSETSCANOUT command larger than numscanouts...

CVE-2016-10028

The virglcmdgetcapset function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a VIRTIOGPUCMDGETCAPSET command with a maximum capabilities size...

UBUNTU-CVE-2016-10029

The virtiogpusetscanout function in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a scanout id in a VIRTIOGPUCMDSETSCANOUT command larger than numscanouts...

UBUNTU-CVE-2016-10028

The virglcmdgetcapset function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a VIRTIOGPUCMDGETCAPSET command with a maximum capabilities size...

QEMU Denial of Service Vulnerability (CNVD-2017-01851)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the 'virtio-gpu.c' file in QEMU. An attacker can exploit this vulnerability to cause a QEMU instan...

QEMU Denial of Service Vulnerability (CNVD-2017-01853)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the 'virtio-gpu-3d.c' file in QEMU. An attacker can exploit this vulnerability to cause a QEMU...

QEMU 'virtio-crypto.c' integer overflow vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An integer overflow vulnerability exists in the virtio-crypto.c file in QEMU. An attacker can exploit the vulnerability to cause a denial of...

QEMU 'virtio-gpu-3d.c' Denial of Service Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a denial of service vulnerability. An attacker can exploit this vulnerability to cause a QEMU instance to crash, resulting i...

CVE-2017-5931

Integer overflow in hw/virtio/virtio-crypto.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service QEMU process crash or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow...

CVE-2017-5857

Memory leak in the virglcmdresourceunref function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRTIOGPUCMDRESOURCEUNREF commands sent without detaching the backing storage beforehan...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a system failure or cause other adverse effects on the system.

The vulnerability of the Virtio GPU emulation hardware support in QEMU is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to cause a service failure or otherwise affect the system as a result of reversing the VIRTIOGPUCMDGETCAPSET...

The vulnerability of the QEMU hardware emulation software allows a hacker to cause an unexpected termination of the application.

The vulnerability of the Virtio GPU emulation software in QEMU is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a local attacker to cause the application to terminate abnormally due to a file rename and execution...

The vulnerability of the QEMU hardware emulation software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Virtio GPU emulation software in QEMU is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a local attacker to compromise data confidentiality, integrity, and accessibility...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a system failure or cause other adverse effects on the system.

The vulnerability of the Virtio GPU emulation software in QEMU is related to the lack of protection for service data. Exploiting this vulnerability could allow an intruder, operating locally, to trigger a service failure or cause other effects on the system as a result of updating the cursor data...