CVE-2017-13672
Public on 2017-09-01
Modified on 2018-06-11
Description
An out-of-bounds read access issue was found in the VGA display emulator built into the Quick emulator (QEMU). It could occur while reading VGA memory to update graphics display. A privileged user/process inside guest could use this flaw to crash the QEMU process on the host resulting in denial of service situation.
Severity
Low
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| HAQM Linux 1 | qemu-kvm | 2018-06-08 | ALAS-2018-1034 | Fixed |
| HAQM Linux 2 - Core | qemu-kvm | 2018-06-07 | ALAS2-2018-1034 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| HAQM Linux | CVSSv2 | 2.3 | AV:A/AC:M/Au:S/C:N/I:N/A:P |
| HAQM Linux | CVSSv3 | 3.0 | CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L |
| NVD | CVSSv2 | 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P |
| NVD | CVSSv3 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |