An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| http://www.openwall.com/lists/oss-security/2017/02/23/1 | patch mailing list third party advisory |
| https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef | |
| https://access.redhat.com/errata/RHSA-2017:1206 | third party advisory vendor advisory |
| https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633 | patch third party advisory issue tracking |
| https://access.redhat.com/errata/RHSA-2017:1441 | third party advisory vendor advisory |
| http://www.securityfocus.com/bid/96417 | third party advisory vdb entry |
| https://access.redhat.com/errata/RHSA-2017:1856 | third party advisory vendor advisory |
| https://access.redhat.com/errata/RHSA-2017:1205 | third party advisory vendor advisory |