CVE ID:	CVE-2016-9845
Description:	QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9845 94763 http://www.securityfocus.com/bid/94763 GLSA-201701-49 https://security.gentoo.org/glsa/201701-49 [oss-security] 20161205 CVE request: Qemu: display: virtio-gpu-3d: information leakage in virgl_cmd_get_capset_info http://www.openwall.com/lists/oss-security/2016/12/05/15 [oss-security] 20161205 Re: CVE request: Qemu: display: virtio-gpu-3d: information leakage in virgl_cmd_get_capset_info http://www.openwall.com/lists/oss-security/2016/12/05/22 [qemu-devel] 20161101 [PATCH] virtio-gpu: fix information leak in getting capset info dispatch https://lists.nongnu.org/archive/html/qemu-devel/2016-11/msg00019.html