p PatchFirst

CVE-2016-9845

CVE-2016-9845

This page contains facts from public vulnerability sources. Check the original advisory before updating.

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.

CVSS 6.5 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qemu Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:2.8+dfsg-1

    Update to 1:2.8+dfsg-1

  • qemu Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:2.8+dfsg-1

    Update to 1:2.8+dfsg-1

  • qemu Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:2.8+dfsg-1

    Update to 1:2.8+dfsg-1

  • qemu Ubuntu:16.04:LTS

    Versions
    • 1:2.3+dfsg-5ubuntu9
    • 1:2.3+dfsg-5ubuntu10
    • 1:2.4+dfsg-4ubuntu1
    • 1:2.4+dfsg-4ubuntu2
    • 1:2.4+dfsg-4ubuntu3
    • 1:2.4+dfsg-5ubuntu3
    • 1:2.5+dfsg-1ubuntu2
    • 1:2.5+dfsg-1ubuntu3
    • 1:2.5+dfsg-1ubuntu4
    • 1:2.5+dfsg-1ubuntu5
    • 1:2.5+dfsg-5ubuntu1
    • 1:2.5+dfsg-5ubuntu2
    • 1:2.5+dfsg-5ubuntu4
    • 1:2.5+dfsg-5ubuntu6
    • 1:2.5+dfsg-5ubuntu7
    • 1:2.5+dfsg-5ubuntu10
    • 1:2.5+dfsg-5ubuntu10.1
    • 1:2.5+dfsg-5ubuntu10.2
    • 1:2.5+dfsg-5ubuntu10.3
    • 1:2.5+dfsg-5ubuntu10.4
    • 1:2.5+dfsg-5ubuntu10.5
    • 1:2.5+dfsg-5ubuntu10.6
    • 1:2.5+dfsg-5ubuntu10.7
    • 1:2.5+dfsg-5ubuntu10.8
    • 1:2.5+dfsg-5ubuntu10.9
    • 1:2.5+dfsg-5ubuntu10.10
    Affected ranges
    • ECOSYSTEM: < 1:2.5+dfsg-5ubuntu10.11

    Update to 1:2.5+dfsg-5ubuntu10.11

Original sources

Check your server →