CVE

Id
87522  
CVE No.
CVE-2016-10029  
Status
Candidate  
Description
The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.  
Phase
Assigned (20161222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
763912 87522 CVE-2016-10029 MLIST:[oss-security] 20161220 CVE request Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout  View
763913 87522 CVE-2016-10029 URL:http://www.openwall.com/lists/oss-security/2016/12/20/2  View
763914 87522 CVE-2016-10029 MLIST:[oss-security] 20161222 Re: CVE request Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout  View
763915 87522 CVE-2016-10029 URL:http://www.openwall.com/lists/oss-security/2016/12/22/15  View
763916 87522 CVE-2016-10029 CONFIRM:http://git.qemu-project.org/?p=qemu.git;a=commit;h=2fe760554eb3769d70f608a158474f  View
763917 87522 CVE-2016-10029 CONFIRM:http://git.qemu-project.org/?p=qemu.git;a=commit;h=acfc4846508a02cc4c83aa27799fd7  View
763918 87522 CVE-2016-10029 BID:94978  View
763919 87522 CVE-2016-10029 URL:http://www.securityfocus.com/bid/94978  View
763920 87522 CVE-2016-10029 SECTRACK:1037526  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1187 JVNDB-2016-001960 Adobe Flash Player の Transform オブジェクトの実装における任意のコードを実行される脆弱性 Adobe Flash Player の Transform オブジェクトの実装には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-1016 87522 9.3 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001960.html  View