CVEvulnerability

CVE-2017-2620

9.9 CRITICAL Published 2018-07-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS 3.0 ([email protected])
9.9 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-125, CWE-787

Description

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

Affected configurations

• qemu qemu (< 2.8.0) • citrix xenserver 6.0.2 • citrix xenserver 6.2.0 • citrix xenserver 6.5 • citrix xenserver 7.0 • citrix xenserver 7.1 • redhat openstack 5.0 • redhat openstack 6.0 • redhat openstack 7.0 • redhat openstack 8 • redhat openstack 9 • redhat openstack 10 • debian debian linux 7.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 7.3 • redhat enterprise linux server aus 7.4 • redhat enterprise linux server eus 7.3 • redhat enterprise linux server eus 7.4 • redhat enterprise linux server eus 7.5 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0 • xen xen (<= 4.7.1) • xen xen 4.7.1

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-787 Out-of-bounds Write weakness

References