CVE-2017-2633mediumCWE-120

CVE-2017-2633: medium-severity vulnerability in Qemu:

Published · Updated

Follow this CVE+ Monitor QEMU+ Monitor qemu

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 3.1%
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
Affected products
QEMU · Qemu:
Related CVEs — Qemu:

In the same product, most dangerous first.

CVE-2016-9603MEDIUMCVE-2016-9603EPSS 4.4%CVE-2017-2620MEDIUMCVE-2017-2620EPSS 3.6%CVE-2017-2630MEDIUMCVE-2017-2630EPSS 2.6%