An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633 | Issue Tracking Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2017/02/23/1 | Mailing List Patch Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1856 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1441 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1206 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1205 | Third Party Advisory |
| http://www.securityfocus.com/bid/96417 | Third Party Advisory VDB Entry |
| https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef | |
| https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
07 Nov 2023, 02:43
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
Information
Published : 2018-07-27 19:29
Updated : 2023-11-07 02:43
NVD link : CVE-2017-2633
Mitre link : CVE-2017-2633
JSON object : View
Products Affected
redhat
- enterprise_linux_server_eus
- enterprise_linux_desktop
- enterprise_linux_server
- enterprise_linux_server_aus
- enterprise_linux_workstation
qemu
- qemu