CVE details
CVE-2017-2633
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
Affected ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| emulators/qemu-cheri | qemu-cheri | 0.d20260108 | unaddressed | brooks@FreeBSD.org |
Template for a VuXML entry
Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.
<vuln vid="FIXME (make newentry)">
<topic>FIXME -- FIXME</topic>
<affects>
<package>
<name>qemu-cheri</name>
<range><lt>1.7.2</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>An out-of-bounds memory access issue was found in Quick Emulator
(QEMU) before 1.7.2 in the VNC display driver. This flaw could occur
while refreshing the VNC display surface area in the
'vnc_refresh_server_surface'. A user inside a guest could use this
flaw to crash the QEMU process.</p>
</body>
</description>
<references>
<cvename>CVE-2017-2633</cvename>
<url>https://nvd.nist.gov/vuln/detail/CVE-2017-2633</url>
</references>
<dates>
<discovery>2018-07-27</discovery>
<entry>2026-10-25</entry>
</dates>
</vuln>