Back to search
CVE-2016-3710
Published: May 11, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://xenbits.xen.org/xsa/advisory-179.html
x_refsource_CONFIRM
RHSA-2016:0999
vendor-advisory
x_refsource_REDHAT
90316
vdb-entry
x_refsource_BID
RHSA-2016:0725
vendor-advisory
x_refsource_REDHAT
RHSA-2016:1000
vendor-advisory
x_refsource_REDHAT
http://support.citrix.com/article/CTX212736
x_refsource_CONFIRM
RHSA-2016:1002
vendor-advisory
x_refsource_REDHAT
RHSA-2016:1001
vendor-advisory
x_refsource_REDHAT
RHSA-2016:0997
vendor-advisory
x_refsource_REDHAT
1035794
vdb-entry
x_refsource_SECTRACK
RHSA-2016:1943
vendor-advisory
x_refsource_REDHAT
RHSA-2016:1019
vendor-advisory
x_refsource_REDHAT
USN-2974-1
vendor-advisory
x_refsource_UBUNTU
[oss-security] 20160509 CVE-2016-3710 Qemu: vga: out-of-bounds r/w access issue
mailing-list
x_refsource_MLIST
RHSA-2016:0724
vendor-advisory
x_refsource_REDHAT
[Qemu-devel] 20160509 [PULL 1/5] vga: fix banked access bounds checking (CVE-2016-3710)
mailing-list
x_refsource_MLIST
RHSA-2016:1224
vendor-advisory
x_refsource_REDHAT
DSA-3573
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now