CVE Feed

    Dashboard / CVE / CVE-2017-2620

    CVE-2017-2620

    Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

    Published:Feb 21, 2017
    Last Modified:Nov 21, 2024
    EPS:Jul 27, 2018
    EPSS Score:0.00774
    CVSS Score:5.5

    Affected Products

    Vendor
    Citrix
    Product
    Xenserver
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Qemu
    Product
    Qemu
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation
    Vendor
    Redhat
    Product
    Openstack
    Vendor
    Redhat
    Product
    Rhel Virtualization
    Vendor
    Xen
    Product
    Xen

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2024-5661 (CVSS 6) — An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a maliciou…
    CVE-2012-4606 (CVSS 7.8) — Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 c…
    CVE-2014-3798 (CVSS 6.5) — The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of s…
    CVE-2018-19962 (CVSS 7.8) — An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain h…
    CVE-2018-19961 (CVSS 7.8) — An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain h…
    CVE-2018-19965 (CVSS 5.6) — An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (…
    CVE-2018-14007 (CVSS 9.8) — Citrix XenServer 7.1 and newer allows Directory Traversal.…
    CVE-2018-11053 (CVSS 6.5) — Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, w…
    CVE-2018-3665 (CVSS 5.6) — System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors ma…
    CVE-2018-8897 (CVSS 7.8) — A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manua…

    References

    http://rhn.redhat.com/errata/RHSA-2017-0328.html
    http://rhn.redhat.com/errata/RHSA-2017-0329.html
    http://rhn.redhat.com/errata/RHSA-2017-0330.html
    http://rhn.redhat.com/errata/RHSA-2017-0331.html
    http://rhn.redhat.com/errata/RHSA-2017-0332.html
    http://rhn.redhat.com/errata/RHSA-2017-0333.html
    http://rhn.redhat.com/errata/RHSA-2017-0334.html
    http://rhn.redhat.com/errata/RHSA-2017-0350.html
    http://rhn.redhat.com/errata/RHSA-2017-0351.html
    http://rhn.redhat.com/errata/RHSA-2017-0352.html
    http://rhn.redhat.com/errata/RHSA-2017-0396.html
    http://rhn.redhat.com/errata/RHSA-2017-0454.html
    http://www.openwall.com/lists/oss-security/2017/02/21/1
    http://www.securityfocus.com/bid/96378
    http://www.securitytracker.com/id/1037870
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620
    https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html
    https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
    https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html
    https://security.gentoo.org/glsa/201703-07
    https://security.gentoo.org/glsa/201704-01
    https://support.citrix.com/article/CTX220771
    https://xenbits.xen.org/xsa/advisory-209.html
    http://rhn.redhat.com/errata/RHSA-2017-0328.html
    http://rhn.redhat.com/errata/RHSA-2017-0329.html
    http://rhn.redhat.com/errata/RHSA-2017-0330.html
    http://rhn.redhat.com/errata/RHSA-2017-0331.html
    http://rhn.redhat.com/errata/RHSA-2017-0332.html
    http://rhn.redhat.com/errata/RHSA-2017-0333.html
    http://rhn.redhat.com/errata/RHSA-2017-0334.html
    http://rhn.redhat.com/errata/RHSA-2017-0350.html
    http://rhn.redhat.com/errata/RHSA-2017-0351.html
    http://rhn.redhat.com/errata/RHSA-2017-0352.html
    http://rhn.redhat.com/errata/RHSA-2017-0396.html
    http://rhn.redhat.com/errata/RHSA-2017-0454.html
    http://www.openwall.com/lists/oss-security/2017/02/21/1
    http://www.securityfocus.com/bid/96378
    http://www.securitytracker.com/id/1037870
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620
    https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html
    https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
    https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html
    https://security.gentoo.org/glsa/201703-07
    https://security.gentoo.org/glsa/201704-01
    https://support.citrix.com/article/CTX220771
    https://xenbits.xen.org/xsa/advisory-209.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High