EUVD-2017-5189

Malware in sbrugna...

QEMU: VGA: reachable assert failure during display update

An assert failure issue was found in the VGA display emulator built into the Quick emulator QEMU. It could occur while updating graphics display, due to miscalculating region for dirty bitmap snapshot in split screen mode. A privileged user/process inside guest could use this flaw to crash the QE...

CVE-2017-13672

QEMU aka Quick Emulator, when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service out-of-bounds read and QEMU process crash via vectors involving display update...

CVE-2017-13672

CVE-2017-13672 affects QEMU when built with VGA display emulator support. A local privileged user can trigger an out-of-bounds read during VGA display update, crashing the QEMU process and causing DoS. Public advisories confirm vga-related fix in qemu-kvm components (e.g., ALAS-2018-1034, CESA-20...

PT-2017-13004

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue allows local guest OS privileged users to cause a denial of service, resulting in an out-of-bounds read and a QEMU process crash. This is achieved through vectors involving display...

CVE-2017-13672: Out-of-bounds Read

QEMU aka Quick Emulator, when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service out-of-bounds read and QEMU process crash via vectors involving display update...