Vulnetix
Try Vulnetix Request Demo
CVE-2016-9603 PUBLISHED

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.

EPSS 1.59% · 81.5th percentile

Risk Scores

EPSS Score
1.59%
81.5th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSqemu1:2.5+dfsg-5ubuntu10.10, 0, 1:2.3+dfsg-5ubuntu9
Ubuntu:14.04:LTSxen4.3.0-1ubuntu1, 4.3.0-1ubuntu2, 4.3.0-1ubuntu3
Ubuntu:14.04:LTSqemu2.0.0+dfsg-2ubuntu1.29, 2.0.0+dfsg-2ubuntu1.30, 0

Timeline

References

Open in Interactive Console →