CVE-2017-13672
Public on 2017-09-01
Modified on 2018-06-11
Description
An out-of-bounds read access issue was found in the VGA display emulator built into the Quick emulator (QEMU). It could occur while reading VGA memory to update graphics display. A privileged user/process inside guest could use this flaw to crash the QEMU process on the host resulting in denial of service situation.
Severity
Low
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 1 | qemu-kvm | 2018-06-08 | ALAS-2018-1034 | Fixed |
| Amazon Linux 2 - Core | qemu-kvm | 2018-06-07 | ALAS2-2018-1034 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv2 | 2.3 | AV:A/AC:M/Au:S/C:N/I:N/A:P |
| Amazon Linux | CVSSv3 | 3.0 | CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L |
| NVD | CVSSv2 | 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P |
| NVD | CVSSv3 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |