CVE-2017-7718: Medium severity Qemu Qemu vulnerability
hw/display/cirrusvgarop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrusbitbltropfwdtransp and cirrusbitbltropfwd functions.
Other sources
Quick emulator(Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt functions cirrusbitbltropfwdtransp and/or cirrusbitbltropfwd.
A privileged user inside guest could use this flaw to crash the Qemu process resulting in DoS.
Upstream patch -------------- -> http://git.qemu-project.org/?p=qemu.git;a=commitdiff;h=215902d7b6fb50c6fc216fc74f770858278ed904
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/04/19/4
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7718?
CVE-2017-7718 has a severity rating that can lead to denial of service due to out-of-bounds read vulnerabilities.
How can I fix CVE-2017-7718?
To address CVE-2017-7718, upgrade QEMU to a version higher than 2.8.1.1 or apply the relevant patch.
Which versions of QEMU are affected by CVE-2017-7718?
CVE-2017-7718 affects QEMU versions up to and including 2.8.1.1 and the specific version 2.9.0-rc0.
What type of vulnerability is CVE-2017-7718?
CVE-2017-7718 is classified as a denial of service vulnerability due to improper handling of VGA data.
Who can be impacted by CVE-2017-7718?
Local guest OS privileged users may exploit CVE-2017-7718 to cause a crash in the QEMU process.