PT-2018-6623 · Qemu+2 · Qemu+2

Published 2017-04-25 · Updated 2020-09-10 · CVE-2017-18030

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Qemu (affected versions not specified)

Description: The issue allows local OS guest privileged users to cause a denial of service. This can be achieved through vectors related to negative pitch in the cirrus invalidate region function, leading to out-of-bounds array access and a QEMU process crash.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2017-1521

CVE-2017-18030

DLA-1497-1

OPENSUSE-SU-2018_0459-1

SUSE-SU-2018:0438-1

SUSE-SU-2018:0472-1

SUSE-SU-2018:0601-1

SUSE-SU-2018:0609-1

SUSE-SU-2018:0638-1

SUSE-SU-2018:0678-1

SUSE-SU-2018:0831-1

SUSE-SU-2018:1077-1

SUSE-SU-2018:1308-1

Affected Products

Alt Linux

Qemu

Suse

References · 221

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://linux.oracle.com/errata/ELSA-2018-4285.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0678-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-18030 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16845 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15289 · Security Note
• https://bdu.fstec.ru/vul/2017-00074 · Security Note
• https://osv.dev/vulnerability/CVE-2017-18030 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00002 · Security Note
• https://linux.oracle.com/errata/ELSA-2018-4289.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6833 · Security Note