ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-3710

—
CVSS 3.1
8.8 high
EPSS
<1%p58
Published
()
Modified
Description

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

Vendors
debianhpcanonicalqemuoraclecitrixredhat
Products
debian linux, helion openstack, ubuntu linux, qemu, vm server, linux, xenserver, openstack, virtualization, enterprise linux desktop, enterprise linux server, enterprise linux server aus
Weakness
CWE-119
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

No ingested article mentions this CVE yet.