CVE-2016-3710 PUBLISHED

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

EPSS 0.07% · 22.1th percentile

Risk Scores

EPSS Score
0.07%
22.1th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSxen0, 4.3.0-1ubuntu1, 4.3.0-1ubuntu2
Ubuntu:14.04:LTSqemu1.7.0+dfsg-3ubuntu7, 2.0.0~rc1+dfsg-0ubuntu1, 2.0.0~rc1+dfsg-0ubuntu2
Ubuntu:16.04:LTSqemu0, 1:2.3+dfsg-5ubuntu9, 1:2.3+dfsg-5ubuntu10

Timeline

References

Open in Interactive Console →