vulnerability
FreeBSD: xen-tools -- QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks (Multiple CVEs)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | May 11, 2016 | Jul 20, 2016 | Feb 18, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
May 11, 2016
Added
Jul 20, 2016
Modified
Feb 18, 2025
Description
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
Solution
freebsd-upgrade-package-xen-tools
References
- CVE-2016-3710
- https://attackerkb.com/topics/CVE-2016-3710
- CVE-2016-3712
- https://attackerkb.com/topics/CVE-2016-3712
- DEBIAN-DSA-3573
- REDHAT-RHSA-2016:0724
- REDHAT-RHSA-2016:0725
- REDHAT-RHSA-2016:0997
- REDHAT-RHSA-2016:0999
- REDHAT-RHSA-2016:1000
- REDHAT-RHSA-2016:1001
- REDHAT-RHSA-2016:1002
- REDHAT-RHSA-2016:1019
- REDHAT-RHSA-2016:1224
- URL-http://xenbits.xen.org/xsa/advisory-179.html
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.