CVEvulnerability

CVE-2017-2615

9.1 CRITICAL Published 2018-07-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS 3.0 ([email protected])
9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-125, CWE-787

Description

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

Affected configurations

• qemu qemu (<= 2.8.0) • citrix xenserver 6.0.2 • citrix xenserver 6.2.0 • citrix xenserver 6.5 • citrix xenserver 7.0 • citrix xenserver 7.1 • redhat openstack 5.0 • redhat openstack 6.0 • redhat openstack 7.0 • redhat openstack 8 • redhat openstack 9 • redhat openstack 10 • debian debian linux 7.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 7.3 • redhat enterprise linux server aus 7.4 • redhat enterprise linux server eus 7.3 • redhat enterprise linux server eus 7.4 • redhat enterprise linux server eus 7.5 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0 • xen xen (<= 4.7.1) • xen xen 4.7.1

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-787 Out-of-bounds Write weakness

References