Re: [OE-core] [PATCH][krogoth] qemu: CVE-2016-3710

2016-09-22 Thread akuster808
On 09/21/2016 01:10 AM, Sona Sarmadi wrote: Fixes an out-of-bounds read/write access flaw which was found in the way QEMU's VGA emulation with VESA BIOS Extensions (VBE) support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute

[OE-core] [PATCH][krogoth] qemu: CVE-2016-3710

2016-09-21 Thread Sona Sarmadi
Fixes an out-of-bounds read/write access flaw which was found in the way QEMU's VGA emulation with VESA BIOS Extensions (VBE) support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of