Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2017-2620

Disclosure Date: July 27, 2018 •

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

citrix,
debian,
qemu,
redhat,
xen

Products

debian linux 7.0,
enterprise linux desktop 6.0,
enterprise linux desktop 7.0,
enterprise linux server 6.0,
enterprise linux server 7.0,
enterprise linux server aus 7.3,
enterprise linux server aus 7.4,
enterprise linux server eus 7.3,
enterprise linux server eus 7.4,
enterprise linux server eus 7.5,
enterprise linux workstation 6.0,
enterprise linux workstation 7.0,
openstack 10,
openstack 5.0,
openstack 6.0,
openstack 7.0,
openstack 8,
openstack 9,
qemu,
xen,
xen 4.7.1,
xenserver 6.0.2,
xenserver 6.2.0,
xenserver 6.5,
xenserver 7.0,
xenserver 7.1

References

Canonical

CVE-2017-2620 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2620)

BID-96378 (http://www.securityfocus.com/bid/96378)

Advisory

http://rhn.redhat.com/errata/RHSA-2017-0329.html

http://rhn.redhat.com/errata/RHSA-2017-0334.html

SECTRACK-1037870 (http://www.securitytracker.com/id/1037870)

http://rhn.redhat.com/errata/RHSA-2017-0328.html

[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update (https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html)

http://rhn.redhat.com/errata/RHSA-2017-0333.html

http://rhn.redhat.com/errata/RHSA-2017-0351.html

http://rhn.redhat.com/errata/RHSA-2017-0454.html

https://xenbits.xen.org/xsa/advisory-209.html

http://rhn.redhat.com/errata/RHSA-2017-0331.html

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620

[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo (http://www.openwall.com/lists/oss-security/2017/02/21/1)

http://rhn.redhat.com/errata/RHSA-2017-0350.html

[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update (https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html)

http://rhn.redhat.com/errata/RHSA-2017-0396.html

GLSA-201704-01 (https://security.gentoo.org/glsa/201704-01)

[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620) (https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html)

http://rhn.redhat.com/errata/RHSA-2017-0352.html

http://rhn.redhat.com/errata/RHSA-2017-0330.html

http://rhn.redhat.com/errata/RHSA-2017-0332.html

https://support.citrix.com/article/CTX220771

GLSA-201703-07 (https://security.gentoo.org/glsa/201703-07)

Rapid7

Technical Analysis