UBUNTU-CVE-2017-2633

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2017-2633

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-2633.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-2633

Upstream

CVE-2017-2633

Downstream

USN-3261-1

Related

USN-3261-1

Published

2017-02-22T00:00:00Z

Modified

2025-07-18T16:43:48Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserver_surface'. A user inside a guest could use this flaw to crash the QEMU process.

References

Affected packages

Ubuntu:14.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@2.0.0+dfsg-2ubuntu1.33?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.0+dfsg-2ubuntu1.33

Affected versions

1.*

1.5.0+dfsg-3ubuntu5

1.5.0+dfsg-3ubuntu6

1.6.0+dfsg-2ubuntu1

1.6.0+dfsg-2ubuntu2

1.6.0+dfsg-2ubuntu3

1.6.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu1

1.7.0+dfsg-2ubuntu2

1.7.0+dfsg-2ubuntu3

1.7.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu5

1.7.0+dfsg-2ubuntu7

1.7.0+dfsg-2ubuntu8

1.7.0+dfsg-2ubuntu9

1.7.0+dfsg-3ubuntu1~ppa1

1.7.0+dfsg-3ubuntu1

1.7.0+dfsg-3ubuntu2

1.7.0+dfsg-3ubuntu3

1.7.0+dfsg-3ubuntu4

1.7.0+dfsg-3ubuntu5

1.7.0+dfsg-3ubuntu6

1.7.0+dfsg-3ubuntu7

2.*

2.0.0~rc1+dfsg-0ubuntu1

2.0.0~rc1+dfsg-0ubuntu2

2.0.0~rc1+dfsg-0ubuntu3

2.0.0~rc1+dfsg-0ubuntu3.1

2.0.0+dfsg-2ubuntu1

2.0.0+dfsg-2ubuntu1.1

2.0.0+dfsg-2ubuntu1.2

2.0.0+dfsg-2ubuntu1.3

2.0.0+dfsg-2ubuntu1.5

2.0.0+dfsg-2ubuntu1.6

2.0.0+dfsg-2ubuntu1.7

2.0.0+dfsg-2ubuntu1.8

2.0.0+dfsg-2ubuntu1.9

2.0.0+dfsg-2ubuntu1.10

2.0.0+dfsg-2ubuntu1.11

2.0.0+dfsg-2ubuntu1.13

2.0.0+dfsg-2ubuntu1.14

2.0.0+dfsg-2ubuntu1.15

2.0.0+dfsg-2ubuntu1.16

2.0.0+dfsg-2ubuntu1.17

2.0.0+dfsg-2ubuntu1.18

2.0.0+dfsg-2ubuntu1.19

2.0.0+dfsg-2ubuntu1.20

2.0.0+dfsg-2ubuntu1.21

2.0.0+dfsg-2ubuntu1.22

2.0.0+dfsg-2ubuntu1.24

2.0.0+dfsg-2ubuntu1.25

2.0.0+dfsg-2ubuntu1.26

2.0.0+dfsg-2ubuntu1.27

2.0.0+dfsg-2ubuntu1.28

2.0.0+dfsg-2ubuntu1.29

2.0.0+dfsg-2ubuntu1.30

2.0.0+dfsg-2ubuntu1.31

2.0.0+dfsg-2ubuntu1.32

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "qemu",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-common",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-guest-agent",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-guest-agent-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-keymaps",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-kvm",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-aarch64",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-arm",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-arm-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-common",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-common-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-mips",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-mips-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-misc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-misc-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-ppc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-ppc-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-sparc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-sparc-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-x86",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-system-x86-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-user",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-user-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-user-static",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-user-static-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-utils",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        },
        {
            "binary_name": "qemu-utils-dbgsym",
            "binary_version": "2.0.0+dfsg-2ubuntu1.33"
        }
    ]
}