CVE-2017-2615 | BDVDB-2026-103208 Detail
qemudisplay
Description#
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
Impact#
Per CVSS v3.0: confidentiality impact low, integrity impact low, availability impact low. Attack vector: adjacent.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
- http://rhn.redhat.com/errata/RHSA-2017-0329.html
- http://rhn.redhat.com/errata/RHSA-2017-0334.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615
- http://www.securitytracker.com/id/1037804
- http://rhn.redhat.com/errata/RHSA-2017-0328.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
- http://www.securityfocus.com/bid/95990
- http://rhn.redhat.com/errata/RHSA-2017-0333.html
- https://security.gentoo.org/glsa/201702-27
- http://www.openwall.com/lists/oss-security/2017/02/01/6
- http://rhn.redhat.com/errata/RHSA-2017-0454.html
- https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html
- http://rhn.redhat.com/errata/RHSA-2017-0331.html
- https://security.gentoo.org/glsa/201702-28
- http://rhn.redhat.com/errata/RHSA-2017-0350.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.