CVE-2016-9845

Description

QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing VIRTIO_GPU_CMD_GET_CAPSET_INFO command. A guest user/process could use this flaw to leak contents of the host memory bytes.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.095

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in QEMU 2.5.0	Windows
Multiple Vulnerabilities are affected in QEMU 2.5.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234