NetSight
IP …
high7.8

CVE-2017-7980

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or c…

Impact

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.

Affected products

VendorProductAffected versions
QemuQemu
through 2.8
CanonicalUbuntu Linux
Versions 14.04, 16.04, 16.10, 17.04
DebianDebian Linux
Version 8.0
RedhatOpenstack
Versions 6.0, 7.0, 8, 9, 10, 5.0
RedhatVirtualization
Version 3.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0

Weakness classification

CWE-119

References