High severity · published Jan 9, 2018
CVE-2017-15124
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer…
7.5
CVSS
2.8%
EPSS
No
On KEV
Description
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QE
Qemu · Qemu
through 2.11.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-15124
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-15124
www.securityfocus.com
http://www.securityfocus.com/bid/102295
access.redhat.com
https://access.redhat.com/errata/RHSA-2018:0816
access.redhat.com
https://access.redhat.com/errata/RHSA-2018:1104
access.redhat.com
https://access.redhat.com/errata/RHSA-2018:1113
access.redhat.com
https://access.redhat.com/errata/RHSA-2018:3062
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1525195
More from Qemu
10.0
CVE-2022-36648
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially…
10.0
CVE-2017-16845
hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access
10.0
CVE-2015-8556
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1
9.9
CVE-2016-9603
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update…
9.9
CVE-2017-2620
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue