CVE-2016-4454

The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause…

published June 1, 2016

CVSS
—
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.2th percentile
Published
2016-06-01T22:00Z
EPSS history
Timeline
  • 01 JUN 22:00Z
    The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause…
    cvelistv5