PT-2017-3587 · Qemu+5 · Qemu+5

Daniel Berrange · Published 2017-12-12 · Updated 2023-02-12 · CVE-2017-15124

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: QEMU versions 2.11.0 and older

Description: The issue is related to insufficient input validation in the VNC server implementation of the QEMU hardware emulator. It can be exploited by a remote attacker to cause a denial of service. A malicious remote VNC client can utilize this flaw to allocate growing memory, leading to a denial of service on the server host.

Recommendations: For QEMU versions 2.11.0 and older, consider restricting access to the VNC server implementation until a patch is available. As a temporary workaround, limiting the memory allocation for the VNC server or throttling the framebuffer updates sent to the client may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Allocation of Resources Without Limits

Weakness Enumeration

CWE-20

CWE-770

Related Identifiers

ALT-PU-2018-1226

BDU:2018-00519

CESA-2018_0816

CVE-2017-15124

DSA-4213-1

OPENSUSE-SU-2018_0780-1

RHSA-2018:0816

RHSA-2018:1104

RHSA-2018:1113

RHSA-2018:3062

RHSA-2018_0816

RHSA-2018_3062

SUSE-SU-2018:0762-1

SUSE-SU-2018:0831-1

USN-3575-1

USN-3575-2

Affected Products

Alt Linux

Centos

Qemu

Red Hat

Suse

Ubuntu

References · 133

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• https://linux.oracle.com/errata/ELSA-2018-4285.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14167 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16845 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15289 · Security Note
• https://access.redhat.com/errata/RHSA-2018:0816 · Vendor Advisory
• https://debian.org/security/2018/dsa-4213 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15118 · Security Note
• https://access.redhat.com/errata/RHSA-2018:1113 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2018-4289.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00519 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14167 · Security Note
• https://linux.oracle.com/errata/ELSA-2018-0816.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16845 · Vendor Advisory