Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-18030

Опубликовано: 23 янв. 2018
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 2.1
CVSS3: 4.4

Описание

The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.

РелизСтатусПримечание
artful

not-affected

1:2.10+dfsg-0ubuntu3.4
bionic

not-affected

1:2.11+dfsg-1ubuntu1
cosmic

not-affected

1:2.11+dfsg-1ubuntu1
devel

not-affected

1:2.11+dfsg-1ubuntu1
disco

not-affected

1:2.11+dfsg-1ubuntu1
eoan

not-affected

1:2.11+dfsg-1ubuntu1
esm-infra-legacy/trusty

not-affected

2.0.0+dfsg-2ubuntu1.38
esm-infra/bionic

not-affected

1:2.11+dfsg-1ubuntu1
esm-infra/focal

not-affected

1:2.11+dfsg-1ubuntu1
esm-infra/xenial

not-affected

1:2.5+dfsg-5ubuntu10.20

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

EPSS

Процентиль: 30%
0.00107
Низкий

2.1 Low

CVSS2

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 3
redhat
больше 8 лет назад

The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.

CVSS3: 4.4
nvd
больше 7 лет назад

The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.

CVSS3: 4.4
debian
больше 7 лет назад

The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qe ...

CVSS3: 4.4
github
около 3 лет назад

The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.

suse-cvrf
около 7 лет назад

Security update for kvm

EPSS

Процентиль: 30%
0.00107
Низкий

2.1 Low

CVSS2

4.4 Medium

CVSS3