Описание
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.1+dfsg-7ubuntu5 |
| esm-infra-legacy/trusty | not-affected | 2.0.0+dfsg-2ubuntu1.9 |
| lucid | DNE | |
| precise | DNE | |
| trusty | released | 2.0.0+dfsg-2ubuntu1.9 |
| trusty/esm | not-affected | 2.0.0+dfsg-2ubuntu1.9 |
| upstream | needs-triage | |
| utopic | released | 2.1+dfsg-4ubuntu6.3 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | released | 0.12.3+noroms-0ubuntu9.26 |
| precise | released | 1.0+noroms-0ubuntu14.21 |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | needs-triage | |
| utopic | DNE |
Показывать по
EPSS
4.6 Medium
CVSS2
Связанные уязвимости
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirr ...
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.
ELSA-2015-0867: qemu-kvm security and bug fix update (IMPORTANT)
EPSS
4.6 Medium
CVSS2