Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-7980
HistoryJul 25, 2017 - 2:29 p.m.

CVE-2017-7980

2017-07-2514:29:00
CWE-119
[email protected]
web.nvd.nist.gov
10

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

31.1%

JSON

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.

Affected configurations

Nvd
Node
qemuqemuRange≤2.8
Node
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch16.10
OR
canonicalubuntu_linuxMatch17.04
Node
debiandebian_linuxMatch8.0
Node
redhatopenstackMatch6.0
OR
redhatopenstackMatch7.0
OR
redhatopenstackMatch8
OR
redhatopenstackMatch9
OR
redhatopenstackMatch10
Node
redhatenterprise_linuxMatch7.0
AND
redhatopenstackMatch5.0
Node
redhatenterprise_linuxMatch6.0
AND
redhatopenstackMatch5.0
OR
redhatvirtualizationMatch3.0
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_ausMatch7.3
OR
redhatenterprise_linux_server_ausMatch7.4
OR
redhatenterprise_linux_server_ausMatch7.6
OR
redhatenterprise_linux_server_eusMatch7.3
OR
redhatenterprise_linux_server_eusMatch7.4
OR
redhatenterprise_linux_server_eusMatch7.5
OR
redhatenterprise_linux_server_eusMatch7.6
OR
redhatenterprise_linux_server_tusMatch7.3
OR
redhatenterprise_linux_server_tusMatch7.6
OR
redhatenterprise_linux_workstationMatch6.0
OR
redhatenterprise_linux_workstationMatch7.0

Related

osv 4
redhatcve 1
prion 1
cvelist 1
debiancve 1
cve 1
veracode 1
ubuntucve 1
openvas 22
nessus 36
suse 10
centos 2
oraclelinux 3
redhat 10
debian 3
citrix 1
ibm 1
ubuntu 1
fedora 1
gentoo 1
osv
osv
CVE-2017-7980
2017-07-25 14:29:00
qemu-kvm - security update
2017-05-11 00:00:00
qemu - security update
2017-07-21 00:00:00
redhatcve
redhatcve
CVE-2017-7980
2019-10-10 15:19:59
prion
prion
Heap overflow
2017-07-25 14:29:00
cvelist
cvelist
CVE-2017-7980
2017-07-25 14:00:00
debiancve
debiancve
CVE-2017-7980
2017-07-25 14:29:00
cve
cve
CVE-2017-7980
2017-07-25 14:29:00
veracode
veracode
Heap-Based Buffer Overflow
2019-05-02 06:09:48
ubuntucve
ubuntucve
CVE-2017-7980
2017-04-21 00:00:00
openvas
openvas
RedHat Update for qemu-kvm RHSA-2017:1430-01
2017-06-13 00:00:00
CentOS Update for qemu-img CESA-2017:1430 centos7
2017-06-14 00:00:00
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2017-1119)
2020-01-23 00:00:00
nessus
nessus
Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20170613)
2017-06-14 00:00:00
RHEL 7 : qemu-kvm (RHSA-2017:1430)
2017-06-14 00:00:00
Virtuozzo 7 : qemu-img / qemu-kvm / qemu-kvm-common / etc (VZLSA-2017-1430)
2017-07-13 00:00:00
suse
suse
Security update for xen (important)
2017-05-02 18:17:32
Security update for xen (important)
2017-05-02 18:11:58
Security update for xen (important)
2017-05-02 18:13:29
centos
centos
qemu security update
2017-06-13 18:32:57
qemu security update
2017-05-09 16:59:13
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2017-06-13 00:00:00
qemu-kvm security update
2017-05-09 00:00:00
qemu-kvm security update
2018-07-10 00:00:00
redhat
redhat
(RHSA-2017:1430) Important: qemu-kvm security and bug fix update
2017-06-13 06:16:45
(RHSA-2017:0984) Important: qemu-kvm-rhev security update
2017-04-18 04:31:59
(RHSA-2017:0980) Important: qemu-kvm-rhev security update
2017-04-18 04:27:51
debian
debian
[SECURITY] [DLA 939-1] qemu-kvm security update
2017-05-11 10:00:48
[SECURITY] [DLA 1035-1] qemu security update
2017-07-21 15:17:41
[SECURITY] [DLA 1497-1] qemu security update
2018-09-06 18:49:12
citrix
citrix
Citrix XenServer Multiple Security Updates
2017-12-01 05:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in qemu-kvm and libguestfs affect SmartCloud Entry (CVE-2016-9603 CVE-2017-2633 CVE-2017-7718 CVE-2017-7980 CVE-2015-8869)
2020-07-19 00:49:12
ubuntu
ubuntu
QEMU vulnerabilities
2017-05-16 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: qemu-2.7.1-7.fc25
2017-07-25 21:29:02
gentoo
gentoo
QEMU: Multiple vulnerabilities
2017-06-06 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

31.1%

JSON
Related for NVD:CVE-2017-7980
osv4redhatcve1prion1cvelist1debiancve1cve1veracode1ubuntucve1openvas22nessus36suse10centos2oraclelinux3redhat10debian3citrix1ibm1ubuntu1fedora1gentoo1