CVEvulnerability
CVE-2017-7980
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-07-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
Affected configurations
• qemu qemu (<= 2.8)
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 16.10
• canonical ubuntu linux 17.04
• debian debian linux 8.0
• redhat openstack 6.0
• redhat openstack 7.0
• redhat openstack 8
• redhat openstack 9
• redhat openstack 10
• redhat openstack 5.0
• redhat virtualization 3.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.3
• redhat enterprise linux server aus 7.4
• redhat enterprise linux server aus 7.6
• redhat enterprise linux server eus 7.3
• redhat enterprise linux server eus 7.4
• redhat enterprise linux server eus 7.5
• redhat enterprise linux server eus 7.6
• redhat enterprise linux server tus 7.3
• redhat enterprise linux server tus 7.6
• redhat enterprise linux workstation 6.0
• redhat enterprise linux workstation 7.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://ubuntu.com/usn/usn-3289-1 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/04/21/1 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/102129 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/97955 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:0980 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0981 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0982 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0983 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0984 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0988 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1205 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1206 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1430 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1441 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1430056 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201706-03 Patch, Third Party Advisory, VDB Entry
- https://support.citrix.com/article/CTX230138 Third Party Advisory
- http://ubuntu.com/usn/usn-3289-1 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/04/21/1 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/102129 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/97955 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:0980 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0981 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0982 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0983 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0984 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:0988 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1205 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1206 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1430 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1441 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1430056 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201706-03 Patch, Third Party Advisory, VDB Entry
- https://support.citrix.com/article/CTX230138 Third Party Advisory