CVE-2017-2615 - CVE House

Back to Database

Status published Medium CVE-2017-2615

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA...

5.5 CVSS

Vulnerability Description

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-2615

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from qemu

View All →

The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model...

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read...

ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access...

hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an...

A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in...

Affected Vendor

qemu

View all reports →

Affected Software

display

Vulnerable Versions:

Unknown

Timeline

Official Publish: July 2nd, 2018

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control

T1485 Data Destruction