vulnerability

FreeBSD: VID-a73aba9a-effe-11e6-ae1b-002590263bf5 (CVE-2017-2615): xen-tools -- oob access in cirrus bitblt copy

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Feb 11, 2017
Added
Feb 11, 2017
Modified
Dec 10, 2025

Description

The Xen Project reports: When doing bitblt copy backwards, qemu should negate the blit width. This avoids an oob access before the start of video memory. A malicious guest administrator can cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation.

Solution

freebsd-upgrade-package-xen-tools
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.