Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2017-2633 — MEDIUM severity vulnerability | Release Alert

CVE-2017-2633

MEDIUMCVSS v2

Published

July 27, 2018

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.

qemu-project/qemu

GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

< 1.7.2NVD

qemu/qemu

GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.

< 1.7.2NVD

More on this CVE

NVD↗GitHub Advisory↗

bonzini/qemu

GitHubMy QEMU tree

< 1.7.2NVD

birkelund/qemu

< 1.7.2NVD

thuth/qemu

GitLabQEMU mirror for GitLab CI: Please see http://wiki.qemu.org/Contribute/SubmitAPatch for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org

< 1.7.2NVD