vulnerability

Ubuntu: (Multiple Advisories) (CVE-2017-13672): QEMU vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
2	(AV:L/AC:L/Au:N/C:N/I:N/A:P)	Sep 1, 2017	Feb 21, 2018	Mar 27, 2026

Severity

CVSS

(AV:L/AC:L/Au:N/C:N/I:N/A:P)

Published

Sep 1, 2017

Added

Feb 21, 2018

Modified

Mar 27, 2026

Description

QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.

Solutions

ubuntu-upgrade-qemu-systemubuntu-upgrade-qemu-system-aarch64ubuntu-upgrade-qemu-system-armubuntu-upgrade-qemu-system-mipsubuntu-upgrade-qemu-system-miscubuntu-upgrade-qemu-system-ppcubuntu-upgrade-qemu-system-s390xubuntu-upgrade-qemu-system-sparcubuntu-upgrade-qemu-system-x86

References

CVE-2017-13672
https://attackerkb.com/topics/CVE-2017-13672
CWE-125
DEBIAN-DSA-3991
EUVD-EUVD-2017-5189
NVD-CVE-2017-13672
UBUNTU-USN-3575-1
UBUNTU-USN-3575-2
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-5189

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today