An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
References
| Link | Resource |
|---|---|
| https://git.qemu.org/?p=qemu.git;a=commitdiff;h=bea60dd7679364493a0d7f5b54316c767cf894ef | Patch Vendor Advisory |
| https://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f64916da20eea67121d544698676295bbb105a7 | Patch Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633 | Issue Tracking Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/02/23/1 | Mailing List Patch Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1856 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1441 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1206 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1205 | Third Party Advisory |
| http://www.securityfocus.com/bid/96417 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2018-07-27 19:29
Updated : 2019-10-09 23:26
NVD link : CVE-2017-2633
Mitre link : CVE-2017-2633
JSON object : View
Products Affected
qemu
- qemu
redhat
- enterprise_linux_server
- enterprise_linux_desktop
- enterprise_linux_workstation
- enterprise_linux_server_aus
- enterprise_linux_server_eus