CVE-2017-2615CWE-787

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue

Medium · published July 2, 2018

CVSS v3.0
5.5
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.03648 · 89.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2018-07-02T18:00Z
EPSS history
Timeline
  • 02 JUL 18:00Z
    Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue
    cvelistv5