UBUNTU-CVE-2017-2615

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2017-2615

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-2615.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-2615

Related

Published

2017-02-01T00:00:00Z

Modified

2017-02-01T00:00:00Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

References

Affected packages

Ubuntu:14.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@2.0.0+dfsg-2ubuntu1.33?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.0+dfsg-2ubuntu1.33

Affected versions

1.*

1.5.0+dfsg-3ubuntu5

1.5.0+dfsg-3ubuntu6

1.6.0+dfsg-2ubuntu1

1.6.0+dfsg-2ubuntu2

1.6.0+dfsg-2ubuntu3

1.6.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu1

1.7.0+dfsg-2ubuntu2

1.7.0+dfsg-2ubuntu3

1.7.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu5

1.7.0+dfsg-2ubuntu7

1.7.0+dfsg-2ubuntu8

1.7.0+dfsg-2ubuntu9

1.7.0+dfsg-3ubuntu1~ppa1

1.7.0+dfsg-3ubuntu1

1.7.0+dfsg-3ubuntu2

1.7.0+dfsg-3ubuntu3

1.7.0+dfsg-3ubuntu4

1.7.0+dfsg-3ubuntu5

1.7.0+dfsg-3ubuntu6

1.7.0+dfsg-3ubuntu7

2.*

2.0.0~rc1+dfsg-0ubuntu1

2.0.0~rc1+dfsg-0ubuntu2

2.0.0~rc1+dfsg-0ubuntu3

2.0.0~rc1+dfsg-0ubuntu3.1

2.0.0+dfsg-2ubuntu1

2.0.0+dfsg-2ubuntu1.1

2.0.0+dfsg-2ubuntu1.2

2.0.0+dfsg-2ubuntu1.3

2.0.0+dfsg-2ubuntu1.5

2.0.0+dfsg-2ubuntu1.6

2.0.0+dfsg-2ubuntu1.7

2.0.0+dfsg-2ubuntu1.8

2.0.0+dfsg-2ubuntu1.9

2.0.0+dfsg-2ubuntu1.10

2.0.0+dfsg-2ubuntu1.11

2.0.0+dfsg-2ubuntu1.13

2.0.0+dfsg-2ubuntu1.14

2.0.0+dfsg-2ubuntu1.15

2.0.0+dfsg-2ubuntu1.16

2.0.0+dfsg-2ubuntu1.17

2.0.0+dfsg-2ubuntu1.18

2.0.0+dfsg-2ubuntu1.19

2.0.0+dfsg-2ubuntu1.20

2.0.0+dfsg-2ubuntu1.21

2.0.0+dfsg-2ubuntu1.22

2.0.0+dfsg-2ubuntu1.24

2.0.0+dfsg-2ubuntu1.25

2.0.0+dfsg-2ubuntu1.26

2.0.0+dfsg-2ubuntu1.27

2.0.0+dfsg-2ubuntu1.28

2.0.0+dfsg-2ubuntu1.29

2.0.0+dfsg-2ubuntu1.30

2.0.0+dfsg-2ubuntu1.31

2.0.0+dfsg-2ubuntu1.32

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "qemu-system-misc": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-guest-agent-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-arm-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-utils-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-user": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-kvm": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-ppc-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-aarch64": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-user-static": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-arm": "2.0.0+dfsg-2ubuntu1.33",
            "qemu": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-sparc": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-common-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-common": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-x86-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-guest-agent": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-utils": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-misc-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-sparc-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-mips-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-x86": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-ppc": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-common": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-keymaps": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-user-static-dbgsym": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-system-mips": "2.0.0+dfsg-2ubuntu1.33",
            "qemu-user-dbgsym": "2.0.0+dfsg-2ubuntu1.33"
        }
    ]
}

Ubuntu:14.04:LTS / xen

Package

Name: xen
Purl: pkg:deb/ubuntu/xen@4.4.2-0ubuntu0.14.04.11?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.4.2-0ubuntu0.14.04.11

Affected versions

4.*

4.3.0-1ubuntu1

4.3.0-1ubuntu2

4.3.0-1ubuntu3

4.3.0-1ubuntu4

4.3.0-1ubuntu5

4.4.0-0ubuntu3

4.4.0-0ubuntu4

4.4.0-0ubuntu5

4.4.0-0ubuntu5.1

4.4.0-0ubuntu5.2

4.4.1-0ubuntu0.14.04.1

4.4.1-0ubuntu0.14.04.2

4.4.1-0ubuntu0.14.04.3

4.4.1-0ubuntu0.14.04.4

4.4.1-0ubuntu0.14.04.5

4.4.1-0ubuntu0.14.04.6

4.4.2-0ubuntu0.14.04.1

4.4.2-0ubuntu0.14.04.2

4.4.2-0ubuntu0.14.04.3

4.4.2-0ubuntu0.14.04.4

4.4.2-0ubuntu0.14.04.5

4.4.2-0ubuntu0.14.04.6

4.4.2-0ubuntu0.14.04.7

4.4.2-0ubuntu0.14.04.9

4.4.2-0ubuntu0.14.04.10

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "xenstore-utils-dbgsym": "4.4.2-0ubuntu0.14.04.11",
            "libxenstore3.0": "4.4.2-0ubuntu0.14.04.11",
            "libxen-4.4": "4.4.2-0ubuntu0.14.04.11",
            "libxenstore3.0-dbgsym": "4.4.2-0ubuntu0.14.04.11",
            "libxen-ocaml-dev": "4.4.2-0ubuntu0.14.04.11",
            "libxen-dev": "4.4.2-0ubuntu0.14.04.11",
            "xen-utils-4.4-dbgsym": "4.4.2-0ubuntu0.14.04.11",
            "xen-hypervisor-4.3-amd64": "4.4.2-0ubuntu0.14.04.11",
            "xen-hypervisor-4.3-armhf": "4.4.2-0ubuntu0.14.04.11",
            "xen-system-amd64": "4.4.2-0ubuntu0.14.04.11",
            "xen-hypervisor-4.4-arm64": "4.4.2-0ubuntu0.14.04.11",
            "libxen-ocaml": "4.4.2-0ubuntu0.14.04.11",
            "xenstore-utils": "4.4.2-0ubuntu0.14.04.11",
            "xen-system-armhf": "4.4.2-0ubuntu0.14.04.11",
            "xen-hypervisor-4.1-amd64": "4.4.2-0ubuntu0.14.04.11",
            "xen-hypervisor-4.4-armhf": "4.4.2-0ubuntu0.14.04.11",
            "xen-hypervisor-4.4-amd64": "4.4.2-0ubuntu0.14.04.11",
            "xen-utils-common": "4.4.2-0ubuntu0.14.04.11",
            "libxen-ocaml-dbgsym": "4.4.2-0ubuntu0.14.04.11",
            "xen-utils-4.4": "4.4.2-0ubuntu0.14.04.11",
            "libxen-4.4-dbgsym": "4.4.2-0ubuntu0.14.04.11",
            "xen-system-arm64": "4.4.2-0ubuntu0.14.04.11"
        }
    ]
}

Ubuntu:16.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:2.5+dfsg-5ubuntu10.11?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.5+dfsg-5ubuntu10.11

Affected versions

1:2.*

1:2.3+dfsg-5ubuntu9

1:2.3+dfsg-5ubuntu10

1:2.4+dfsg-4ubuntu1

1:2.4+dfsg-4ubuntu2

1:2.4+dfsg-4ubuntu3

1:2.4+dfsg-5ubuntu3

1:2.5+dfsg-1ubuntu2

1:2.5+dfsg-1ubuntu3

1:2.5+dfsg-1ubuntu4

1:2.5+dfsg-1ubuntu5

1:2.5+dfsg-5ubuntu1

1:2.5+dfsg-5ubuntu2

1:2.5+dfsg-5ubuntu4

1:2.5+dfsg-5ubuntu6

1:2.5+dfsg-5ubuntu7

1:2.5+dfsg-5ubuntu10

1:2.5+dfsg-5ubuntu10.1

1:2.5+dfsg-5ubuntu10.2

1:2.5+dfsg-5ubuntu10.3

1:2.5+dfsg-5ubuntu10.4

1:2.5+dfsg-5ubuntu10.5

1:2.5+dfsg-5ubuntu10.6

1:2.5+dfsg-5ubuntu10.7

1:2.5+dfsg-5ubuntu10.8

1:2.5+dfsg-5ubuntu10.9

1:2.5+dfsg-5ubuntu10.10

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "qemu-system-misc": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-guest-agent-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-block-extra-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-utils-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-user": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-arm-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-kvm": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-ppc-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-aarch64": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-user-static": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-arm": "1:2.5+dfsg-5ubuntu10.11",
            "qemu": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-sparc": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-s390x-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-common-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-x86-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-guest-agent": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-utils": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-sparc-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-misc-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-block-extra": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-mips-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-x86": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-ppc": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-s390x": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-common": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-user-static-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-system-mips": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-user-dbgsym": "1:2.5+dfsg-5ubuntu10.11",
            "qemu-user-binfmt": "1:2.5+dfsg-5ubuntu10.11"
        }
    ]
}