PT-2017-15453 · Qemu+5 · Qemu+5

Gerd Hoffmann · Published 2017-01-17 · Updated 2024-06-15 · CVE-2017-2620

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.8

Description The issue is related to an out-of-bounds access problem that could occur while copying VGA data in the cirrus bitblt cputovideo function. A privileged user inside the guest could potentially use this flaw to crash the QEMU process or execute arbitrary code on the host with the privileges of the QEMU process.

Recommendations For QEMU versions prior to 2.8, update to version 2.8 or later to resolve the issue.

Exploit

Fix

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALT-PU-2017-1043

CESA-2017_0352

CESA-2017_0396

CVE-2017-2620

DLA-1270-1

DLA-1497-1

DLA-842-1

DLA-845-1

OPENSUSE-SU-2017_0665-1

OPENSUSE-SU-2017_0707-1

OPENSUSE-SU-2024:11287-1

OPENSUSE-SU-2024:11520-1

RHSA-2017:0328

RHSA-2017:0329

RHSA-2017:0330

RHSA-2017:0331

RHSA-2017:0332

RHSA-2017:0333

RHSA-2017:0334

RHSA-2017:0350

RHSA-2017:0351

RHSA-2017:0352

RHSA-2017:0396

RHSA-2017:0454

RHSA-2017_0352

RHSA-2017_0396

RHSA-2017_0454

SUSE-SU-2017:0570-1

SUSE-SU-2017:0571-1

SUSE-SU-2017:0582-1

SUSE-SU-2017:0625-1

SUSE-SU-2017:0647-1

SUSE-SU-2017:0661-1

SUSE-SU-2017:0718-1

SUSE-SU-2017:1135-1

SUSE-SU-2017:1241-1

SUSE-SU-2017:3084-1

USN-3261-1

Affected Products

Alt Linux

Centos

Qemu

Red Hat

Suse

Ubuntu

References · 587

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9103 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9908 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7170 · Security Note
• https://bdu.fstec.ru/vul/2016-02071 · Security Note
• https://errata.altlinux.org/ALT-PU-2017-1043 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7377 · Security Note
• https://bdu.fstec.ru/vul/2017-00650 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11434 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9845 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7718 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4020 · Security Note