CVE-2017-2620

CWE-787 — Out-of-bounds WriteCWE-125 — Out-of-bounds Read11 documents8 sources
Severity
9.9CRITICAL
EPSS
2.4%
top 14.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Qemu QemuXEN XENQemu Qemu:+8 more
Timeline
PublishedJul 27
Latest updateMay 13

Description

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

CVSS vector

CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:LExploitability: 1.3 | Impact: 3.7

Affected Packages10 packages

▶NVDqemu/qemu< 2.8.0
▶Debianqemu< 1:2.8+dfsg-3+3
▶CVEListV5qemu/qemu:2.8
▶Debianxen< 4.4.0-1+3
▶NVDxen/xen4.7.1+1

Also affects: Debian Linux 7.0, Enterprise Linux 7.3, 7.4, 7.5

Patches

Patch: lists.gnu.org ↗Patch: lists.gnu.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-v6gr-ph59-9hqm: Quick emulator (QEMU) before 2↗2022-05-13
▶
CVEList
CVE-2017-2620: Quick emulator (QEMU) before 2↗2018-07-27
▶
OSV
CVE-2017-2620: Quick emulator (QEMU) before 2↗2018-07-27
▶

📋Vendor Advisories

3
Ubuntu
QEMU vulnerabilities↗2017-04-20
▶
Red Hat
Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo↗2017-02-21
▶
Debian
CVE-2017-2620: qemu - Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator su...↗2017
▶

💬Community

4
Bugzilla
CVE-2017-2620 Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [fedora-all]↗2017-02-21
▶
Bugzilla
CVE-2017-2620 xen: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [fedora-all]↗2017-02-21
▶
Bugzilla
CVE-2017-2620 Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo↗2017-02-08
▶
Bugzilla
CVE-2016-10092 libtiff: Heap-based buffer overflow in _TIFFFax3fillruns↗2017-01-04
▶
CVE-2017-2620 (CRITICAL CVSS 9.9) | Quick emulator (QEMU) before 2.8 bu | cvebase.io