CVE-2017-7980
- State
- Published
- Severity
- Not scored
- Published
- Jul 25, 2017
- Updated
- Aug 5, 2024
- Reserved
- Apr 20, 2017
Description
Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2017:0983vendor-advisory
- [oss-security] 20170421 CVE-2017-7980 Qemu: display: cirrus: OOB r/w access issues in bitblt routinesmailing-list
- RHSA-2017:0982vendor-advisory
- [debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security updatemailing-list
- RHSA-2017:1430vendor-advisory
- GLSA-201706-03vendor-advisory
- USN-3289-1vendor-advisory
- RHSA-2017:1206vendor-advisory
- 97955vdb-entry
- 102129vdb-entry
- RHSA-2017:0984vendor-advisory
- RHSA-2017:0988vendor-advisory
- RHSA-2017:1441vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1430056
- RHSA-2017:0981vendor-advisory
- RHSA-2017:0980vendor-advisory
- RHSA-2017:1205vendor-advisory
- https://support.citrix.com/article/CTX230138
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.