CVE-2016-1714
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 6.1%
The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
Produtos afetados
n/a · n/aReferências
http://rhn.redhat.com/errata/RHSA-2016-0081.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0082.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0083.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0084.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0085.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0086.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0087.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0088.htmlhttps://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00428.htmlhttps://security.gentoo.org/glsa/201604-01http://www.debian.org/security/2016/dsa-3469http://www.debian.org/security/2016/dsa-3470