CVE

Id
87521  
CVE No.
CVE-2016-10028  
Status
Candidate  
Description
The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.  
Phase
Assigned (20161222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
763902 87521 CVE-2016-10028 MLIST:[oss-security] 20161220 CVE request Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities  View
763903 87521 CVE-2016-10028 URL:http://www.openwall.com/lists/oss-security/2016/12/20/1  View
763904 87521 CVE-2016-10028 MLIST:[oss-security] 20161222 Re: CVE request Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities  View
763905 87521 CVE-2016-10028 URL:http://www.openwall.com/lists/oss-security/2016/12/22/14  View
763906 87521 CVE-2016-10028 MLIST:[qemu-devel] 20161214 [PATCH] display: virtio-gpu-3d: check virgl capabilities max_size  View
763907 87521 CVE-2016-10028 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg01903.html  View
763908 87521 CVE-2016-10028 CONFIRM:http://git.qemu-project.org/?p=qemu.git;a=commit;h=abd7f08b2353f43274b785db8c7224f082ef4d31  View
763909 87521 CVE-2016-10028 BID:94981  View
763910 87521 CVE-2016-10028 URL:http://www.securityfocus.com/bid/94981  View
763911 87521 CVE-2016-10028 SECTRACK:1037525  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1314 JVNDB-2016-002087 Adobe Flash Player における任意のコードを実行される脆弱性 Adobe Flash Player には、任意のコードを実行される脆弱性が存在します。 CVE-2016-1015 87521 9.3 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002087.html  View