CVE-2017-13673
Published: 29 August 2017
The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function.
Notes
Author | Note |
---|---|
mdeslaur | introduced by https://git.qemu.org/?p=qemu.git;a=commit;h=fec5e8c92becad223df9d972770522f64aafdb72 |
Priority
CVSS 3 base score: 6.5
Status
Package | Release | Status |
---|---|---|
qemu-kvm Launchpad, Ubuntu, Debian |
upstream |
Needs triage
|
precise |
Not vulnerable
(code not present)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
zesty |
Does not exist
|
|
artful |
Does not exist
|
|
qemu Launchpad, Ubuntu, Debian |
upstream |
Needs triage
|
precise |
Does not exist
|
|
trusty |
Not vulnerable
(code not present)
|
|
xenial |
Not vulnerable
(code not present)
|
|
zesty |
Not vulnerable
(code not present)
|
|
artful |
Not vulnerable
(1:2.10+dfsg-0ubuntu3.4)
|
|
Patches: upstream: https://git.qemu.org/?p=qemu.git;a=commit;h=e65294157d4b69393b3f819c99f4f647452b48e3 |