Vulnerability-Lookup

SUSE-SU-2017:0571-1

Vulnerability from csaf_suse - Published: 2017-02-27 12:57 - Updated: 2026-09-20 12:23

Summary

Security update for xen

Severity

Important

Notes

Title of the patch: Security update for xen

Description of the patch: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024834). - CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004). - A malicious guest could have, by frequently rebooting over extended periods of time, run the host system out of memory, resulting in a Denial of Service (DoS) (bsc#1022871) - CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1015169 These non-security issues were fixed: - bsc#1000195: Prevent panic on CPU0 while booting on SLES 11 SP3 - bsc#1002496: Added support for reloading clvm in block-dmmd block-dmmd - bsc#1005028: Fixed building Xen RPMs from Sources

Patchnames: SUSE-SLE-DESKTOP-12-SP2-2017-296,SUSE-SLE-SDK-12-SP2-2017-296,SUSE-SLE-SERVER-12-SP2-2017-296

CVE-2016-9921

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 15 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2016-9922

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 15 products, the same list as for CVE-2016-9921

Threats

Impact moderate

CVE-2017-2615

5.5 (Medium)


                
                  CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 15 products, the same list as for CVE-2016-9921

Threats

Impact moderate

CVE-2017-2620

9.9 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 15 products, the same list as for CVE-2016-9921

Threats

Impact moderate

References

34 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1000195	self
https://bugzilla.suse.com/1002496	self
https://bugzilla.suse.com/1005028	self
https://bugzilla.suse.com/1012651	self
https://bugzilla.suse.com/1014298	self
https://bugzilla.suse.com/1014300	self
https://bugzilla.suse.com/1015169	self
https://bugzilla.suse.com/1016340	self
https://bugzilla.suse.com/1022871	self
https://bugzilla.suse.com/1023004	self
https://bugzilla.suse.com/1024834	self
https://www.suse.com/security/cve/CVE-2016-9921/	self
https://www.suse.com/security/cve/CVE-2016-9922/	self
https://www.suse.com/security/cve/CVE-2017-2615/	self
https://www.suse.com/security/cve/CVE-2017-2620/	self
https://www.suse.com/security/cve/CVE-2016-9921	external
https://bugzilla.suse.com/1014702	external
https://bugzilla.suse.com/1015169	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2016-9922	external
https://bugzilla.suse.com/1014702	external
https://bugzilla.suse.com/1015169	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-2615	external
https://bugzilla.suse.com/1023004	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-2620	external
https://bugzilla.suse.com/1024834	external
https://bugzilla.suse.com/1024972	external
https://bugzilla.suse.com/1178658	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for xen",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for xen fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024834).\n- CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004).\n- A malicious guest could have, by frequently rebooting over extended periods of time, run the host system out of memory, resulting in a Denial of Service (DoS) (bsc#1022871)\n- CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1015169\n\nThese non-security issues were fixed:\n\n- bsc#1000195: Prevent panic on CPU0 while booting on SLES 11 SP3 \n- bsc#1002496: Added support for reloading clvm in block-dmmd block-dmmd\n- bsc#1005028: Fixed building Xen RPMs from Sources\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP2-2017-296,SUSE-SLE-SDK-12-SP2-2017-296,SUSE-SLE-SERVER-12-SP2-2017-296",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0571-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:0571-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170571-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:0571-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-February/002667.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1000195",
        "url": "https://bugzilla.suse.com/1000195"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1002496",
        "url": "https://bugzilla.suse.com/1002496"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1005028",
        "url": "https://bugzilla.suse.com/1005028"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1012651",
        "url": "https://bugzilla.suse.com/1012651"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1014298",
        "url": "https://bugzilla.suse.com/1014298"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1014300",
        "url": "https://bugzilla.suse.com/1014300"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1015169",
        "url": "https://bugzilla.suse.com/1015169"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1016340",
        "url": "https://bugzilla.suse.com/1016340"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1022871",
        "url": "https://bugzilla.suse.com/1022871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1023004",
        "url": "https://bugzilla.suse.com/1023004"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024834",
        "url": "https://bugzilla.suse.com/1024834"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9921 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9921/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9922 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9922/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2615 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2615/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2620 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2620/"
      }
    ],
    "title": "Security update for xen",
    "tracking": {
      "current_release_date": "2026-09-20T12:23:21Z",
      "generator": {
        "date": "2017-02-27T12:57:38Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:0571-1",
      "initial_release_date": "2017-02-27T12:57:38Z",
      "revision_history": [
        {
          "date": "2017-02-27T12:57:38Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T12:23:21Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-devel-0:4.7.1_06-31.1.aarch64",
                "product": {
                  "name": "xen-devel-0:4.7.1_06-31.1.aarch64",
                  "product_id": "xen-devel-0:4.7.1_06-31.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.7.1_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-devel@4.7.1_06-31.1?arch=aarch64\u0026upstream=xen-0:4.7.1_06-31.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-0:4.7.1_06-31.1.x86_64",
                "product": {
                  "name": "xen-0:4.7.1_06-31.1.x86_64",
                  "product_id": "xen-0:4.7.1_06-31.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.7.1_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen@4.7.1_06-31.1?arch=x86_64\u0026upstream=xen-0:4.7.1_06-31.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-0:4.7.1_06-31.1.x86_64",
                "product": {
                  "name": "xen-libs-0:4.7.1_06-31.1.x86_64",
                  "product_id": "xen-libs-0:4.7.1_06-31.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.7.1_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-libs@4.7.1_06-31.1?arch=x86_64\u0026upstream=xen-0:4.7.1_06-31.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
                "product": {
                  "name": "xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
                  "product_id": "xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.7.1_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-libs-32bit@4.7.1_06-31.1?arch=x86_64\u0026upstream=xen-0:4.7.1_06-31.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-0:4.7.1_06-31.1.x86_64",
                "product": {
                  "name": "xen-devel-0:4.7.1_06-31.1.x86_64",
                  "product_id": "xen-devel-0:4.7.1_06-31.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.7.1_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-devel@4.7.1_06-31.1?arch=x86_64\u0026upstream=xen-0:4.7.1_06-31.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-0:4.7.1_06-31.1.x86_64",
                "product": {
                  "name": "xen-doc-html-0:4.7.1_06-31.1.x86_64",
                  "product_id": "xen-doc-html-0:4.7.1_06-31.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.7.1_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-doc-html@4.7.1_06-31.1?arch=x86_64\u0026upstream=xen-0:4.7.1_06-31.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-0:4.7.1_06-31.1.x86_64",
                "product": {
                  "name": "xen-tools-0:4.7.1_06-31.1.x86_64",
                  "product_id": "xen-tools-0:4.7.1_06-31.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.7.1_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools@4.7.1_06-31.1?arch=x86_64\u0026upstream=xen-0:4.7.1_06-31.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-0:4.7.1_06-31.1.x86_64",
                "product": {
                  "name": "xen-tools-domU-0:4.7.1_06-31.1.x86_64",
                  "product_id": "xen-tools-domU-0:4.7.1_06-31.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.7.1_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools-domU@4.7.1_06-31.1?arch=x86_64\u0026upstream=xen-0:4.7.1_06-31.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 12 SP2",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-hpc:12:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-libs-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.7.1_06-31.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64"
        },
        "product_reference": "xen-devel-0:4.7.1_06-31.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-devel-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.7.1_06-31.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64"
        },
        "product_reference": "xen-devel-0:4.7.1_06-31.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-devel-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.7.1_06-31.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64"
        },
        "product_reference": "xen-devel-0:4.7.1_06-31.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-devel-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-doc-html-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-libs-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-tools-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-0:4.7.1_06-31.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64"
        },
        "product_reference": "xen-tools-domU-0:4.7.1_06-31.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-9921",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9921"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9921",
          "url": "https://www.suse.com/security/cve/CVE-2016-9921"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014702 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1014702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1015169 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1015169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-27T12:57:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9921"
    },
    {
      "cve": "CVE-2016-9922",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9922"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9922",
          "url": "https://www.suse.com/security/cve/CVE-2016-9922"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014702 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1014702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1015169 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1015169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-27T12:57:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9922"
    },
    {
      "cve": "CVE-2017-2615",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2615"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2615",
          "url": "https://www.suse.com/security/cve/CVE-2017-2615"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1023004 for CVE-2017-2615",
          "url": "https://bugzilla.suse.com/1023004"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-2615",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-27T12:57:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-2615"
    },
    {
      "cve": "CVE-2017-2620",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2620"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2620",
          "url": "https://www.suse.com/security/cve/CVE-2017-2620"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024834 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1024834"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024972 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1024972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-doc-html-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-libs-32bit-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP2:xen-tools-domU-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-0:4.7.1_06-31.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-02-27T12:57:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-2620"
    }
  ]
}

CVE-2016-9921 (GCVE-0-2016-9921)

Vulnerability from cvelistv5 – Published: 2016-12-23 22:00 – Updated: 2024-08-06 03:07

Summary

Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

6 references

URL	Tags
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-49	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/94803	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2016/12/09/1	mailing-listx_refsource_MLIST

Date Public

2016-12-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.373Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "94803",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94803"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "94803",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94803"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9921",
    "datePublished": "2016-12-23T22:00:00.000Z",
    "dateReserved": "2016-12-08T00:00:00.000Z",
    "dateUpdated": "2024-08-06T03:07:31.373Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9922 (GCVE-0-2016-9922)

Vulnerability from cvelistv5 – Published: 2017-03-27 15:00 – Updated: 2024-08-06 03:07

Summary

The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

8 references

URL	Tags
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/94803	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1334398	x_refsource_CONFIRM
http://git.qemu-project.org/?p=qemu.git%3Ba=commi…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2016/12/09/1	mailing-listx_refsource_MLIST

Date Public

2016-12-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:30.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20161205 [PULL 4/4] display: cirrus: check vga bits per pixel(bpp) value",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "94803",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94803"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[qemu-devel] 20161205 [PULL 4/4] display: cirrus: check vga bits per pixel(bpp) value",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "94803",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94803"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9922",
    "datePublished": "2017-03-27T15:00:00.000Z",
    "dateReserved": "2016-12-08T00:00:00.000Z",
    "dateUpdated": "2024-08-06T03:07:30.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-2615 (GCVE-0-2017-2615)

Vulnerability from cvelistv5 – Published: 2018-07-02 18:00 – Updated: 2024-08-05 14:02

Summary

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

Severity

5.5 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-787

Assigner

redhat redhat root

References

21 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2017-0329.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0334.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037804	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2017-0328.html	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/95990	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2017-0333.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201702-27	vendor-advisoryx_refsource_GENTOO
http://www.openwall.com/lists/oss-security/2017/02/01/6	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2017-0454.html	vendor-advisoryx_refsource_REDHAT
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2017-0331.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201702-28	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2017-0350.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0396.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0309.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0344.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0330.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0332.html	vendor-advisoryx_refsource_REDHAT
https://support.citrix.com/article/CTX220771	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
qemu	display	Affected: n/a

Date Public

2017-01-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:06.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0329",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
          },
          {
            "name": "RHSA-2017:0334",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615"
          },
          {
            "name": "1037804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037804"
          },
          {
            "name": "RHSA-2017:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "95990",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95990"
          },
          {
            "name": "RHSA-2017:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
          },
          {
            "name": "GLSA-201702-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-27"
          },
          {
            "name": "[oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/01/6"
          },
          {
            "name": "RHSA-2017:0454",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
          },
          {
            "name": "[qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html"
          },
          {
            "name": "RHSA-2017:0331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "RHSA-2017:0350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
          },
          {
            "name": "RHSA-2017:0396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
          },
          {
            "name": "RHSA-2017:0309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0309.html"
          },
          {
            "name": "RHSA-2017:0344",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0344.html"
          },
          {
            "name": "RHSA-2017:0330",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
          },
          {
            "name": "RHSA-2017:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX220771"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "display",
          "vendor": "qemu",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:0329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
        },
        {
          "name": "RHSA-2017:0334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615"
        },
        {
          "name": "1037804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037804"
        },
        {
          "name": "RHSA-2017:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "95990",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95990"
        },
        {
          "name": "RHSA-2017:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
        },
        {
          "name": "GLSA-201702-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-27"
        },
        {
          "name": "[oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/01/6"
        },
        {
          "name": "RHSA-2017:0454",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
        },
        {
          "name": "[qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html"
        },
        {
          "name": "RHSA-2017:0331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "RHSA-2017:0350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
        },
        {
          "name": "RHSA-2017:0396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
        },
        {
          "name": "RHSA-2017:0309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0309.html"
        },
        {
          "name": "RHSA-2017:0344",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0344.html"
        },
        {
          "name": "RHSA-2017:0330",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
        },
        {
          "name": "RHSA-2017:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX220771"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2615",
    "datePublished": "2018-07-02T18:00:00.000Z",
    "dateReserved": "2016-12-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:02:06.484Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-2620 (GCVE-0-2017-2620)

Vulnerability from cvelistv5 – Published: 2018-07-27 19:00 – Updated: 2024-08-05 14:02

Summary

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

Severity

5.5 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-787

Assigner

redhat redhat root

References

23 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2017-0329.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0334.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1037870	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2017-0328.html	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2017-0333.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0351.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0454.html	vendor-advisoryx_refsource_REDHAT
https://xenbits.xen.org/xsa/advisory-209.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2017-0331.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2017/02/21/1	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2017-0350.html	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2017-0396.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201704-01	vendor-advisoryx_refsource_GENTOO
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2017-0352.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0330.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2017-0332.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/96378	vdb-entryx_refsource_BID
https://support.citrix.com/article/CTX220771	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201703-07	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
QEMU	Qemu:	Affected: 2.8

Date Public

2017-02-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:07.311Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0329",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
          },
          {
            "name": "RHSA-2017:0334",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
          },
          {
            "name": "1037870",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037870"
          },
          {
            "name": "RHSA-2017:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
          },
          {
            "name": "RHSA-2017:0351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
          },
          {
            "name": "RHSA-2017:0454",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://xenbits.xen.org/xsa/advisory-209.html"
          },
          {
            "name": "RHSA-2017:0331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
          },
          {
            "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
          },
          {
            "name": "RHSA-2017:0350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
          },
          {
            "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
          },
          {
            "name": "RHSA-2017:0396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
          },
          {
            "name": "RHSA-2017:0352",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
          },
          {
            "name": "RHSA-2017:0330",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
          },
          {
            "name": "RHSA-2017:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
          },
          {
            "name": "96378",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96378"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX220771"
          },
          {
            "name": "GLSA-201703-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201703-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Qemu:",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.8"
            }
          ]
        }
      ],
      "datePublic": "2017-02-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:0329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
        },
        {
          "name": "RHSA-2017:0334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
        },
        {
          "name": "1037870",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037870"
        },
        {
          "name": "RHSA-2017:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
        },
        {
          "name": "RHSA-2017:0351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
        },
        {
          "name": "RHSA-2017:0454",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://xenbits.xen.org/xsa/advisory-209.html"
        },
        {
          "name": "RHSA-2017:0331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
        },
        {
          "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
        },
        {
          "name": "RHSA-2017:0350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
        },
        {
          "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
        },
        {
          "name": "RHSA-2017:0396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
        },
        {
          "name": "RHSA-2017:0352",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
        },
        {
          "name": "RHSA-2017:0330",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
        },
        {
          "name": "RHSA-2017:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
        },
        {
          "name": "96378",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96378"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX220771"
        },
        {
          "name": "GLSA-201703-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201703-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2017-2620",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Qemu:",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "QEMU"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.9/AV:A/AC:M/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:0329",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
            },
            {
              "name": "RHSA-2017:0334",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
            },
            {
              "name": "1037870",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037870"
            },
            {
              "name": "RHSA-2017:0328",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "RHSA-2017:0333",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
            },
            {
              "name": "RHSA-2017:0351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
            },
            {
              "name": "RHSA-2017:0454",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
            },
            {
              "name": "https://xenbits.xen.org/xsa/advisory-209.html",
              "refsource": "CONFIRM",
              "url": "https://xenbits.xen.org/xsa/advisory-209.html"
            },
            {
              "name": "RHSA-2017:0331",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
            },
            {
              "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
            },
            {
              "name": "RHSA-2017:0350",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
            },
            {
              "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
            },
            {
              "name": "RHSA-2017:0396",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
            },
            {
              "name": "RHSA-2017:0352",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
            },
            {
              "name": "RHSA-2017:0330",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
            },
            {
              "name": "RHSA-2017:0332",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
            },
            {
              "name": "96378",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96378"
            },
            {
              "name": "https://support.citrix.com/article/CTX220771",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX220771"
            },
            {
              "name": "GLSA-201703-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201703-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2620",
    "datePublished": "2018-07-27T19:00:00.000Z",
    "dateReserved": "2016-12-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:02:07.311Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2017:0571-1

CVE-2016-9921 (GCVE-0-2016-9921)

CVE-2016-9922 (GCVE-0-2016-9922)

CVE-2017-2615 (GCVE-0-2017-2615)

CVE-2017-2620 (GCVE-0-2017-2620)

Tags

Sightings

Nomenclature

Related by attack behaviour