The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | May 18, 2016 |
| Centos_linux | — | Upgrade libcacard-toolsUpgrade kvmUpgrade qemu-kvmUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade kmod-kvm-debugUpgrade qemu-imgUpgrade kvm-toolsUpgrade qemu-kvm-commonUpgrade libcacardUpgrade kvm-qemu-imgUpgrade libcacard-devel | Jul 6, 2016 | May 11, 2016 |
| Debian | — | Upgrade xenUpgrade qemu-kvmUpgrade qemu | May 10, 2016 | May 9, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Jul 4, 2016 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade kvmUpgrade libcacard-toolsUpgrade kmod-kvm-debugUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacardUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade qemu-guest-agentUpgrade libcacard-devel | May 11, 2016 | May 9, 2016 |
| Redhat_linux | — | Upgrade qemu-guest-agentUpgrade kvmUpgrade qemu-kvm-commonNo solution existsUpgrade libcacardUpgrade kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade kvm-qemu-imgUpgrade qemu-imgUpgrade libcacard-develUpgrade libcacard-toolsUpgrade qemu-kvmUpgrade kvm-debuginfoUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade kmod-kvm-debug | Oct 6, 2017 | May 11, 2016 |
| Suse | — | Upgrade xen-doc-pdfUpgrade qemu-block-sshUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-ui-gtkUpgrade xen-kmp-paeUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-ipxeUpgrade xen-libsUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade xen-doc-htmlUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-tools-domUUpgrade qemu-sgabiosUpgrade qemu-microvmUpgrade qemu-s390xUpgrade xen-kmp-traceUpgrade xen-develUpgrade xen-libs-32bitUpgrade qemu-x86Upgrade xenUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-rbdUpgrade qemu-s390Upgrade qemu-chardev-baumUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-toolsUpgrade kvm | Jun 13, 2016 | May 11, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system | May 12, 2016 | May 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub