Lucene search

K
cvelistRedhatCVELIST:CVE-2016-10028
HistoryFeb 27, 2017 - 10:00 p.m.

CVE-2016-10028

2017-02-2722:00:00
redhat
www.cve.org
1

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%