NVD

Id
22476  
Name
CVE-2016-9846  
Description
QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-12-29  
Modified Date
2017-01-03  
Seq
2016-9846  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119242 22476 CVE-2016-9846 [oss-security] 20161205 CVE request Qemu: display: virtio-gpu: memory leakage while updating cursor  View
119243 22476 CVE-2016-9846 [oss-security] 20161205 Re: CVE request Qemu: display: virtio-gpu: memory leakage while updating cursor  View
119244 22476 CVE-2016-9846 94765  View
119245 22476 CVE-2016-9846 [qemu-devel] 20161101 [PATCH] virtio-gpu: fix memory leak in update_cursor_data_virgl  View

Related JVN