Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-2615

Опубликовано: 03 июл. 2018
Источник: nvd
CVSS3: 5.5
CVSS3: 9.1
CVSS2: 9
EPSS Низкий

Описание

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 2.8.0 (включая)
Конфигурация 2

Одно из

cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:6.2.0:sp1:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:6.5:sp1:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:7.0:*:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*
Версия до 4.7.1 (включая)
cpe:2.3:o:xen:xen:4.7.1:r1:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.7.1:r2:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.7.1:r3:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.7.1:r4:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00386
Низкий

5.5 Medium

CVSS3

9.1 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-787
CWE-125

Связанные уязвимости

ubuntu логотип

CVE-2017-2615

CVSS3: 5.5
ubuntu
больше 7 лет назад

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

redhat логотип

CVE-2017-2615

CVSS3: 5.5
redhat
почти 9 лет назад

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

debian логотип

CVE-2017-2615

CVSS3: 5.5
debian
больше 7 лет назад

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator sup ...

github логотип

GHSA-wj78-4p23-4g74

CVSS3: 9.1
github
больше 3 лет назад

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

oracle-oval логотип

ELSA-2017-0454

oracle-oval
больше 8 лет назад

ELSA-2017-0454: kvm security update (IMPORTANT)

EPSS

Процентиль: 59%
0.00386
Низкий

5.5 Medium

CVSS3

9.1 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-787
CWE-125