CVE-2017-2615

Severity: critical (CVSS 9.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-02 · updated 2026-06-17
Weakness: CWE-787

Description

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

Affected products

Citrix XenServer: 6.2.0-sp1, 6.5-sp1; 6.0.2, 7.0, 7.1 (and their updates)
Debian Linux: 7.0 (and their updates)
QEMU: through 2.8.0
RedHat Enterprise Linux Desktop: 6.0, 7.0 (and their updates)
RedHat Enterprise Linux Server: 6.0, 7.0 (and their updates)
RedHat Enterprise Linux Server Aus: 7.3, 7.4 (and their updates)
RedHat Enterprise Linux Server Eus: 7.3, 7.4, 7.5 (and their updates)
RedHat Enterprise Linux Workstation: 6.0, 7.0 (and their updates)
OpenStack: 5.0, 6.0, 7.0, 8, 9, 10 (and their updates)
xen: through 4.7.1; 4.7.1-r1, 4.7.1-r2, 4.7.1-r3, 4.7.1-r4
qemu display: all versions

References

Get alerted when CVE-2017-2615 or the next vulnerability affects your stack