CWE Code: 787
Vulnerability Type: privilege_escalation
CVSS Score: 3.6
CWE Name:  Out-of-bounds Write
Summary: qemu (aka quick emulator) built with the ne2000 device emulation support is vulnerable to an oob r/w access issue. it could occur while performing 'ioport' r/w operations. a privileged (cap_sys_rawio) user/process could use this flaw to leak or corrupt qemu memory bytes.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2016-12-29
Last Modified Date: 2017-11-04