Vulnerability-Lookup

RHSA-2017:0454

Vulnerability from csaf_redhat - Published: 2017-03-07 11:02 - Updated: 2025-11-21 17:59

Summary

Red Hat Security Advisory: kvm security update

Severity

Important

Notes

Topic: An update for kvm is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: KVM (for Kernel-based Virtual Machine) is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc. Security Fix(es): * Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host. (CVE-2017-2615) * Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process. (CVE-2017-2620) Red Hat would like to thank Wjjzhang (Tencent.com Inc.) and Li Qiang (360.cn Inc.) for reporting CVE-2017-2615.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2017-2615

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

5.5 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE-787 - Out-of-bounds Write

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Note: The procedure in the Solution section must be performed before this update will take effect. https://access.redhat.com/errata/RHSA-2017:0454

CVE-2017-2620

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

5.5 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE-787 - Out-of-bounds Write

References

URL

Category

	https://access.redhat.com/errata/RHSA-2017:0454	self
	https://access.redhat.com/security/updates/classi…	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1418200	external
	https://bugzilla.redhat.com/show_bug.cgi?id=1420484	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2017-2615	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1418200	external
	https://www.cve.org/CVERecord?id=CVE-2017-2615	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-2615	external
	https://access.redhat.com/security/cve/CVE-2017-2620	self
	https://bugzilla.redhat.com/show_bug.cgi?id=1420484	external
	https://www.cve.org/CVERecord?id=CVE-2017-2620	external
	https://nvd.nist.gov/vuln/detail/CVE-2017-2620	external
	https://xenbits.xen.org/xsa/advisory-209.html	external

Acknowledgments

360.cn Inc. Li Qiang

Tencent.com Inc. Wjjzhang

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kvm is now available for Red Hat Enterprise Linux 5.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "KVM (for Kernel-based Virtual Machine) is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc.\n\nSecurity Fix(es):\n\n* Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host. (CVE-2017-2615)\n\n* Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process. (CVE-2017-2620)\n\nRed Hat would like to thank Wjjzhang (Tencent.com Inc.) and Li Qiang (360.cn Inc.) for reporting CVE-2017-2615.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:0454",
        "url": "https://access.redhat.com/errata/RHSA-2017:0454"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1418200",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418200"
      },
      {
        "category": "external",
        "summary": "1420484",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420484"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0454.json"
      }
    ],
    "title": "Red Hat Security Advisory: kvm security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:59:42+00:00",
      "generator": {
        "date": "2025-11-21T17:59:42+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2017:0454",
      "initial_release_date": "2017-03-07T11:02:09+00:00",
      "revision_history": [
        {
          "date": "2017-03-07T11:02:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-03-07T11:02:09+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:59:42+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
                  "product_id": "5Client-VT-5.11.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_virtualization:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Virtualization (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux Virtualization (v. 5 server)",
                  "product_id": "5Server-VT-5.11.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_virtualization:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kmod-kvm-0:83-277.el5_11.x86_64",
                "product": {
                  "name": "kmod-kvm-0:83-277.el5_11.x86_64",
                  "product_id": "kmod-kvm-0:83-277.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kmod-kvm@83-277.el5_11?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-debuginfo-0:83-277.el5_11.x86_64",
                "product": {
                  "name": "kvm-debuginfo-0:83-277.el5_11.x86_64",
                  "product_id": "kvm-debuginfo-0:83-277.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-debuginfo@83-277.el5_11?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-tools-0:83-277.el5_11.x86_64",
                "product": {
                  "name": "kvm-tools-0:83-277.el5_11.x86_64",
                  "product_id": "kvm-tools-0:83-277.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-tools@83-277.el5_11?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kmod-kvm-debug-0:83-277.el5_11.x86_64",
                "product": {
                  "name": "kmod-kvm-debug-0:83-277.el5_11.x86_64",
                  "product_id": "kmod-kvm-debug-0:83-277.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kmod-kvm-debug@83-277.el5_11?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-qemu-img-0:83-277.el5_11.x86_64",
                "product": {
                  "name": "kvm-qemu-img-0:83-277.el5_11.x86_64",
                  "product_id": "kvm-qemu-img-0:83-277.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-qemu-img@83-277.el5_11?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-0:83-277.el5_11.x86_64",
                "product": {
                  "name": "kvm-0:83-277.el5_11.x86_64",
                  "product_id": "kvm-0:83-277.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm@83-277.el5_11?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kvm-0:83-277.el5_11.src",
                "product": {
                  "name": "kvm-0:83-277.el5_11.src",
                  "product_id": "kvm-0:83-277.el5_11.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm@83-277.el5_11?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kmod-kvm-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Client-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-debug-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kmod-kvm-debug-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Client-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-277.el5_11.src as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.src"
        },
        "product_reference": "kvm-0:83-277.el5_11.src",
        "relates_to_product_reference": "5Client-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kvm-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Client-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-debuginfo-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kvm-debuginfo-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Client-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-qemu-img-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kvm-qemu-img-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Client-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-tools-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kvm-tools-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Client-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kmod-kvm-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Server-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-debug-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kmod-kvm-debug-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Server-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-277.el5_11.src as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.src"
        },
        "product_reference": "kvm-0:83-277.el5_11.src",
        "relates_to_product_reference": "5Server-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kvm-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Server-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-debuginfo-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kvm-debuginfo-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Server-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-qemu-img-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kvm-qemu-img-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Server-VT-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-tools-0:83-277.el5_11.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64"
        },
        "product_reference": "kvm-tools-0:83-277.el5_11.x86_64",
        "relates_to_product_reference": "5Server-VT-5.11.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Li Qiang"
          ],
          "organization": "360.cn Inc."
        },
        {
          "names": [
            "Wjjzhang"
          ],
          "organization": "Tencent.com Inc."
        }
      ],
      "cve": "CVE-2017-2615",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2017-01-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1418200"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.src",
          "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.src",
          "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-2615"
        },
        {
          "category": "external",
          "summary": "RHBZ#1418200",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418200"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-2615",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-2615"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2615",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2615"
        }
      ],
      "release_date": "2017-01-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-03-07T11:02:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nNote: The procedure in the Solution section must be performed before this update will take effect.",
          "product_ids": [
            "5Client-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.src",
            "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.src",
            "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:0454"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.9,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:M/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "5Client-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.src",
            "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.src",
            "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Qemu: display: cirrus: oob access while doing bitblt copy backward mode"
    },
    {
      "cve": "CVE-2017-2620",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2017-02-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1420484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.src",
          "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
          "5Client-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.src",
          "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
          "5Server-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-2620"
        },
        {
          "category": "external",
          "summary": "RHBZ#1420484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-2620",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-2620"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2620",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2620"
        },
        {
          "category": "external",
          "summary": "https://xenbits.xen.org/xsa/advisory-209.html",
          "url": "https://xenbits.xen.org/xsa/advisory-209.html"
        }
      ],
      "release_date": "2017-02-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-03-07T11:02:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nNote: The procedure in the Solution section must be performed before this update will take effect.",
          "product_ids": [
            "5Client-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.src",
            "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.src",
            "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:0454"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.9,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:M/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "5Client-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.src",
            "5Client-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
            "5Client-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kmod-kvm-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kmod-kvm-debug-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.src",
            "5Server-VT-5.11.Z:kvm-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-debuginfo-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-qemu-img-0:83-277.el5_11.x86_64",
            "5Server-VT-5.11.Z:kvm-tools-0:83-277.el5_11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo"
    }
  ]
}

CVE-2017-2620 (GCVE-0-2017-2620)

Vulnerability from cvelistv5 – Published: 2018-07-27 19:00 – Updated: 2024-08-05 14:02

Summary

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

Severity ?

5.5 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-787

Assigner

redhat

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2017-0329.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0334.html	vendor-advisoryx_refsource_REDHAT
	http://www.securitytracker.com/id/1037870	vdb-entryx_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2017-0328.html	vendor-advisoryx_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0333.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0351.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0454.html	vendor-advisoryx_refsource_REDHAT
	https://xenbits.xen.org/xsa/advisory-209.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0331.html	vendor-advisoryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/02/21/1	mailing-listx_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0350.html	vendor-advisoryx_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0396.html	vendor-advisoryx_refsource_REDHAT
	https://security.gentoo.org/glsa/201704-01	vendor-advisoryx_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0352.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0330.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0332.html	vendor-advisoryx_refsource_REDHAT
	http://www.securityfocus.com/bid/96378	vdb-entryx_refsource_BID
	https://support.citrix.com/article/CTX220771	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201703-07	vendor-advisoryx_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	QEMU	Qemu:	Affected: 2.8

Date Public ?

2017-02-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:07.311Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0329",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
          },
          {
            "name": "RHSA-2017:0334",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
          },
          {
            "name": "1037870",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037870"
          },
          {
            "name": "RHSA-2017:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
          },
          {
            "name": "RHSA-2017:0351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
          },
          {
            "name": "RHSA-2017:0454",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://xenbits.xen.org/xsa/advisory-209.html"
          },
          {
            "name": "RHSA-2017:0331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
          },
          {
            "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
          },
          {
            "name": "RHSA-2017:0350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
          },
          {
            "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
          },
          {
            "name": "RHSA-2017:0396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
          },
          {
            "name": "RHSA-2017:0352",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
          },
          {
            "name": "RHSA-2017:0330",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
          },
          {
            "name": "RHSA-2017:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
          },
          {
            "name": "96378",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96378"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX220771"
          },
          {
            "name": "GLSA-201703-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201703-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Qemu:",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.8"
            }
          ]
        }
      ],
      "datePublic": "2017-02-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:0329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
        },
        {
          "name": "RHSA-2017:0334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
        },
        {
          "name": "1037870",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037870"
        },
        {
          "name": "RHSA-2017:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
        },
        {
          "name": "RHSA-2017:0351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
        },
        {
          "name": "RHSA-2017:0454",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://xenbits.xen.org/xsa/advisory-209.html"
        },
        {
          "name": "RHSA-2017:0331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
        },
        {
          "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
        },
        {
          "name": "RHSA-2017:0350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
        },
        {
          "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
        },
        {
          "name": "RHSA-2017:0396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
        },
        {
          "name": "RHSA-2017:0352",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
        },
        {
          "name": "RHSA-2017:0330",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
        },
        {
          "name": "RHSA-2017:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
        },
        {
          "name": "96378",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96378"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX220771"
        },
        {
          "name": "GLSA-201703-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201703-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2017-2620",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Qemu:",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "QEMU"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.9/AV:A/AC:M/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:0329",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
            },
            {
              "name": "RHSA-2017:0334",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
            },
            {
              "name": "1037870",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037870"
            },
            {
              "name": "RHSA-2017:0328",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "RHSA-2017:0333",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
            },
            {
              "name": "RHSA-2017:0351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
            },
            {
              "name": "RHSA-2017:0454",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
            },
            {
              "name": "https://xenbits.xen.org/xsa/advisory-209.html",
              "refsource": "CONFIRM",
              "url": "https://xenbits.xen.org/xsa/advisory-209.html"
            },
            {
              "name": "RHSA-2017:0331",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
            },
            {
              "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
            },
            {
              "name": "RHSA-2017:0350",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
            },
            {
              "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
            },
            {
              "name": "RHSA-2017:0396",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
            },
            {
              "name": "RHSA-2017:0352",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
            },
            {
              "name": "RHSA-2017:0330",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
            },
            {
              "name": "RHSA-2017:0332",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
            },
            {
              "name": "96378",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96378"
            },
            {
              "name": "https://support.citrix.com/article/CTX220771",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX220771"
            },
            {
              "name": "GLSA-201703-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201703-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2620",
    "datePublished": "2018-07-27T19:00:00.000Z",
    "dateReserved": "2016-12-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:02:07.311Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-2615 (GCVE-0-2017-2615)

Vulnerability from cvelistv5 – Published: 2018-07-02 18:00 – Updated: 2024-08-05 14:02

Summary

Severity ?

5.5 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-787

Assigner

redhat

References

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2017-0329.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0334.html	vendor-advisoryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037804	vdb-entryx_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2017-0328.html	vendor-advisoryx_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
	http://www.securityfocus.com/bid/95990	vdb-entryx_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0333.html	vendor-advisoryx_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-27	vendor-advisoryx_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/02/01/6	mailing-listx_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0454.html	vendor-advisoryx_refsource_REDHAT
	https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0331.html	vendor-advisoryx_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-28	vendor-advisoryx_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0350.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0396.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0309.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0344.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0330.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0332.html	vendor-advisoryx_refsource_REDHAT
	https://support.citrix.com/article/CTX220771	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	qemu	display	Affected: n/a

Date Public ?

2017-01-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:06.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0329",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
          },
          {
            "name": "RHSA-2017:0334",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615"
          },
          {
            "name": "1037804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037804"
          },
          {
            "name": "RHSA-2017:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "95990",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95990"
          },
          {
            "name": "RHSA-2017:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
          },
          {
            "name": "GLSA-201702-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-27"
          },
          {
            "name": "[oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/01/6"
          },
          {
            "name": "RHSA-2017:0454",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
          },
          {
            "name": "[qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html"
          },
          {
            "name": "RHSA-2017:0331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "RHSA-2017:0350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
          },
          {
            "name": "RHSA-2017:0396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
          },
          {
            "name": "RHSA-2017:0309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0309.html"
          },
          {
            "name": "RHSA-2017:0344",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0344.html"
          },
          {
            "name": "RHSA-2017:0330",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
          },
          {
            "name": "RHSA-2017:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX220771"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "display",
          "vendor": "qemu",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:0329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
        },
        {
          "name": "RHSA-2017:0334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615"
        },
        {
          "name": "1037804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037804"
        },
        {
          "name": "RHSA-2017:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "95990",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95990"
        },
        {
          "name": "RHSA-2017:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
        },
        {
          "name": "GLSA-201702-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-27"
        },
        {
          "name": "[oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/01/6"
        },
        {
          "name": "RHSA-2017:0454",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
        },
        {
          "name": "[qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html"
        },
        {
          "name": "RHSA-2017:0331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "RHSA-2017:0350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
        },
        {
          "name": "RHSA-2017:0396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
        },
        {
          "name": "RHSA-2017:0309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0309.html"
        },
        {
          "name": "RHSA-2017:0344",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0344.html"
        },
        {
          "name": "RHSA-2017:0330",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
        },
        {
          "name": "RHSA-2017:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX220771"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2615",
    "datePublished": "2018-07-02T18:00:00.000Z",
    "dateReserved": "2016-12-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:02:06.484Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2017:0454

CVE-2017-2620 (GCVE-0-2017-2620)

CVE-2017-2615 (GCVE-0-2017-2615)

Tags

Sightings

Nomenclature