CVE-2017-2633
- State
- Published
- Severity
- 5.4 Medium
- Published
- Jul 27, 2018
- Updated
- Aug 5, 2024
- Reserved
- Dec 1, 2016
Description
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.4 Medium | CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Qemu:QEMU |
|
References
- [oss-security] 20170223 CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limitmailing-list
- https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef
- RHSA-2017:1206vendor-advisory
- https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633
- RHSA-2017:1441vendor-advisory
- 96417vdb-entry
- RHSA-2017:1856vendor-advisory
- RHSA-2017:1205vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.