CVEvulnerability
CVE-2017-2633
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-07-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-120, CWE-125, CWE-787
Description
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
Affected configurations
• qemu qemu (< 1.7.2)
• redhat enterprise linux desktop 6.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.4
• redhat enterprise linux server eus 7.4
• redhat enterprise linux server eus 7.5
• redhat enterprise linux workstation 6.0
• redhat enterprise linux workstation 7.0
Related
References
- http://www.openwall.com/lists/oss-security/2017/02/23/1 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/96417 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1205 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1206 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1441 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1856 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633 Issue Tracking, Patch, Third Party Advisory
- https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7 git.qemu.org
- https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef git.qemu.org
- http://www.openwall.com/lists/oss-security/2017/02/23/1 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/96417 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1205 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1206 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1441 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1856 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633 Issue Tracking, Patch, Third Party Advisory
- https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7 git.qemu.org
- https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef git.qemu.org