CVE-2017-15289: Medium severity Qemu Qemu vulnerability
Last updated 25 August 2025
Other sources
Quick emulator(Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds write access issues. It could occur while writing to VGA memory via mode4and5 write functions.
A privileged user inside guest could use this flaw to crash the Qemu process resulting in DoS.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02557.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/10/12/16
— Red Hat
The mode4and5 write functions in hw/display/cirrusvga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:7.2+dfsg-7+deb12u18Fixed in 1:7.2+dfsg-7+deb12u15Fixed in 1:10.0.13+ds-0+deb13u1Fixed in 1:10.0.2+ds-2+deb13u1Fixed in 1:11.1.2+ds-3
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15289?
CVE-2017-15289 is classified as a high-severity vulnerability due to its potential to allow privileged users to crash the QEMU process.
How do I fix CVE-2017-15289?
To fix CVE-2017-15289, upgrade to QEMU versions 1:5.2+dfsg-11+deb11u3 or higher.
Which versions of QEMU are affected by CVE-2017-15289?
CVE-2017-15289 affects QEMU versions up to and including 2.10.2.
What type of issue is CVE-2017-15289?
CVE-2017-15289 is an out-of-bounds write access vulnerability related to the Cirrus CLGD 54xx VGA Emulator.
Who can exploit CVE-2017-15289?
A privileged user within a guest system can exploit CVE-2017-15289 to trigger a crash in the QEMU process.