CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2016-3710

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

Score
8.8 high
Published
2016-05-11
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
emulators/qemu-cheriqemu-cheri0.d20260108unaddressedbrooks@FreeBSD.org

VuXML

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>qemu-cheri</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>The VGA module in QEMU improperly performs bounds checking on banked
	access to video memory, which allows local guest OS administrators to
	execute arbitrary code on the host by changing access modes after
	setting the bank register, aka the "Dark Portal" issue.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2016-3710</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2016-3710</url>
    </references>
    <dates>
      <discovery>2016-05-11</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>