9.1

CVE-2017-2615

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

Data is provided by the National Vulnerability Database (NVD)
Qemu ≫ Qemu Version <= 2.8.0
Citrix ≫ Xenserver Version6.0.2
Citrix ≫ Xenserver Version6.2.0 Updatesp1
Citrix ≫ Xenserver Version6.5 Updatesp1
Citrix ≫ Xenserver Version7.0
Citrix ≫ Xenserver Version7.1
Redhat ≫ Openstack Version5.0
Redhat ≫ Openstack Version6.0
Redhat ≫ Openstack Version7.0
Redhat ≫ Openstack Version8
Redhat ≫ Openstack Version9
Redhat ≫ Openstack Version10
Debian ≫ Debian Linux Version7.0
Xen ≫ Xen Version <= 4.7.1
Xen ≫ Xen Version4.7.1 Updater1
Xen ≫ Xen Version4.7.1 Updater2
Xen ≫ Xen Version4.7.1 Updater3
Xen ≫ Xen Version4.7.1 Updater4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.39% 0.59
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.1 2.3 6
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
secalert@redhat.com 5.5 1.3 3.7
CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://www.securityfocus.com/bid/95990
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037804
Third Party Advisory
VDB Entry