PT-2016-5963

CVE-2016-4454

·

Published

2016-06-01

·

Updated

2024-06-15

Description by

CVSS 3.1
6.0
Medium
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read in the vmsvga fifo read raw function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2016-1937
DLA-1599-1
OPENSUSE-SU-2016_2494-1
OPENSUSE-SU-2016_2497-1
OPENSUSE-SU-2016_2642-1
OPENSUSE-SU-2024:10233-1
SUSE-SU-2016:2093-1
SUSE-SU-2016:2100-1
SUSE-SU-2016:2533-1
SUSE-SU-2016:2589-1
SUSE-SU-2016:2628-1
SUSE-SU-2016:2725-1
SUSE-SU-2016:2781-1
USN-3047-1
USN-3047-2
Found an issue in the description? Have something to add? Feel free to write us 👾