Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:12304
HistoryJan 15, 2019 - 9:15 a.m.

Privilege Escalation

2019-01-1509:15:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.001 Low

EPSS

Percentile

50.8%

JSON

(QEMU) is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds access issue introduced while copying VGA data via bitblt copy in backward mode, leaving a privileged guest to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

References

Related

cve 1
freebsd 1
nvd 1
nessus 55
prion 1
xen 1
debiancve 1
osv 4
gentoo 2
cvelist 1
f5 1
alpinelinux 1
redhatcve 1
centos 3
redhat 12
ubuntucve 1
openvas 28
oraclelinux 5
fedora 4
suse 12
debian 3
ubuntu 1
cve
cve
CVE-2017-2615
2018-07-03 01:29:00
freebsd
freebsd
xen-tools -- oob access in cirrus bitblt copy
2017-02-10 00:00:00
nvd
nvd
CVE-2017-2615
2018-07-03 01:29:00
nessus
nessus
GLSA-201702-27 : Xen: Multiple vulnerabilities
2017-02-21 00:00:00
FreeBSD : xen-tools -- oob access in cirrus bitblt copy (a73aba9a-effe-11e6-ae1b-002590263bf5)
2017-02-13 00:00:00
Oracle Linux 7 : qemu-kvm (ELSA-2017-0396)
2017-03-03 00:00:00
prion
prion
Out-of-bounds
2018-07-03 01:29:00
xen
xen
oob access in cirrus bitblt copy
2017-02-10 12:43:00
debiancve
debiancve
CVE-2017-2615
2018-07-03 01:29:00
osv
osv
CVE-2017-2615
2018-07-03 01:29:00
qemu-kvm - security update
2017-02-28 00:00:00
qemu - security update
2017-03-01 00:00:00
gentoo
gentoo
Xen: Multiple vulnerabilities
2017-02-21 00:00:00
QEMU: Multiple vulnerabilities
2017-02-21 00:00:00
cvelist
cvelist
CVE-2017-2615
2018-07-02 18:00:00
f5
f5
K41242221 : QEMU vulnerability CVE-2017-2615
2018-10-01 00:00:00
alpinelinux
alpinelinux
CVE-2017-2615
2018-07-03 01:29:00
redhatcve
redhatcve
CVE-2017-2615
2019-10-05 06:28:56
centos
centos
qemu security update
2017-02-24 20:51:12
qemu security update
2017-03-03 13:27:17
kmod, kvm security update
2017-03-08 18:33:47
redhat
redhat
(RHSA-2017:0396) Important: qemu-kvm security and bug fix update
2017-03-02 15:22:52
(RHSA-2017:0309) Important: qemu-kvm security and bug fix update
2017-02-23 16:14:53
(RHSA-2017:0329) Important: qemu-kvm-rhev security update
2017-02-27 23:06:47
ubuntucve
ubuntucve
CVE-2017-2615
2017-02-01 00:00:00
openvas
openvas
RedHat Update for qemu-kvm RHSA-2017:0309-01
2017-03-03 00:00:00
CentOS Update for qemu-img CESA-2017:0396 centos7
2017-03-04 00:00:00
CentOS Update for qemu-guest-agent CESA-2017:0309 centos6
2017-03-02 00:00:00
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2017-02-23 00:00:00
qemu-kvm security and bug fix update
2017-03-02 00:00:00
kvm security update
2017-03-07 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: xen-4.6.4-7.fc24
2017-02-26 00:21:09
[SECURITY] Fedora 25 Update: xen-4.7.1-7.fc25
2017-02-14 21:27:38
[SECURITY] Fedora 24 Update: qemu-2.6.2-7.fc24
2017-03-21 16:52:35
suse
suse
Security update for xen (important)
2017-03-11 15:07:34
Security update for xen (important)
2017-02-27 18:13:48
Security update for kvm (important)
2017-04-28 21:11:21
debian
debian
[SECURITY] [DLA 845-1] qemu security update
2017-03-01 19:51:15
[SECURITY] [DLA 842-1] qemu-kvm security update
2017-02-28 22:09:32
[SECURITY] [DLA 1497-1] qemu security update
2018-09-06 18:49:12
ubuntu
ubuntu
QEMU vulnerabilities
2017-04-20 00:00:00

0.001 Low

EPSS

Percentile

50.8%

JSON
Related for VERACODE:12304
cve1freebsd1nvd1nessus55prion1xen1debiancve1osv4gentoo2cvelist1f51alpinelinux1redhatcve1centos3redhat12ubuntucve1openvas28oraclelinux5fedora4suse12debian3ubuntu1