QwikSec

Security Database

CVE

CWE

Training

CVE-2016-10029

Published: Feb 27, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=acfc4846508a02cc4c83aa27799fd7

x_refsource_CONFIRM

[oss-security] 20161220 CVE request Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_BID

http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=2fe760554eb3769d70f608a158474f

x_refsource_CONFIRM

[oss-security] 20161222 Re: CVE request Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.