CVE-2016-10028

2017-02-2722:59:00

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

26.7%

JSON

The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.

OSVersionArchitecturePackageVersionFilename
Debian12allqemu< 1:2.10.0-1qemu_1:2.10.0-1_all.deb
Debian11allqemu< 1:2.10.0-1qemu_1:2.10.0-1_all.deb
Debian999allqemu< 1:2.10.0-1qemu_1:2.10.0-1_all.deb
Debian13allqemu< 1:2.10.0-1qemu_1:2.10.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	qemu	< 1:2.10.0-1	qemu_1:2.10.0-1_all.deb
Debian	11	all	qemu	< 1:2.10.0-1	qemu_1:2.10.0-1_all.deb
Debian	999	all	qemu	< 1:2.10.0-1	qemu_1:2.10.0-1_all.deb
Debian	13	all	qemu	< 1:2.10.0-1	qemu_1:2.10.0-1_all.deb