CVE-2016-4454 - CERT CVE
ID CVE-2016-4454
Sažetak The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.
Reference
CVSS
Base: 3.6
Impact: 4.9
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE PARTIAL
CVSS vektor AV:L/AC:L/Au:N/C:P/I:N/A:P
Zadnje važnije ažuriranje 14-05-2020 - 13:55
Objavljeno 01-06-2016 - 22:59