CVE

Id
93990  
CVE No.
CVE-2016-7170  
Status
Candidate  
Description
The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.  
Phase
Assigned (20160908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
795274 93990 CVE-2016-7170 MLIST:[oss-security] 20160909 CVE Request Qemu: vmware_vga: OOB stack memory access when processing svga command  View
795275 93990 CVE-2016-7170 URL:http://www.openwall.com/lists/oss-security/2016/09/09/4  View
795276 93990 CVE-2016-7170 MLIST:[oss-security] 20160909 Re: CVE Request Qemu: vmware_vga: OOB stack memory access when processing svga command  View
795277 93990 CVE-2016-7170 URL:http://www.openwall.com/lists/oss-security/2016/09/09/7  View
795278 93990 CVE-2016-7170 MLIST:[qemu-devel] 20160908 [PATCH] vmsvga: correct bitmap and pixmap size checks  View
795279 93990 CVE-2016-7170 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg01764.html  View
795280 93990 CVE-2016-7170 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=167d97a3def77ee2dbf6e908b0ecbfe2103977db  View
795281 93990 CVE-2016-7170 SUSE:openSUSE-SU-2016:3237  View
795282 93990 CVE-2016-7170 URL:http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html  View
795283 93990 CVE-2016-7170 BID:92904  View

Related JVN