An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2017/02/23/1 | Mailing List Patch Third Party Advisory |
| http://www.securityfocus.com/bid/96417 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHSA-2017:1205 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1206 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1441 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1856 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633 | Issue Tracking Patch Third Party Advisory |
| https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7 | |
| https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2018-07-27 19:29
Updated : 2023-11-07 02:43
NVD link : CVE-2017-2633
Mitre link : CVE-2017-2633
CVE.ORG link : CVE-2017-2633
JSON object : View
Products Affected
redhat
- enterprise_linux_server_aus
- enterprise_linux_server
- enterprise_linux_server_eus
- enterprise_linux_desktop
- enterprise_linux_workstation
qemu
- qemu