CVE ID:	CVE-2017-2615
Description:	Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
Test IDs:	1.3.6.1.4.1.25623.1.0.871764   1.3.6.1.4.1.25623.1.0.890845   1.3.6.1.4.1.25623.1.0.890842   1.3.6.1.4.1.25623.1.0.882666   1.3.6.1.4.1.25623.1.0.140173   1.3.6.1.4.1.25623.1.0.891497
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2615 1037804 http://www.securitytracker.com/id/1037804 95990 http://www.securityfocus.com/bid/95990 GLSA-201702-27 https://security.gentoo.org/glsa/201702-27 GLSA-201702-28 https://security.gentoo.org/glsa/201702-28 RHSA-2017:0309 http://rhn.redhat.com/errata/RHSA-2017-0309.html RHSA-2017:0328 http://rhn.redhat.com/errata/RHSA-2017-0328.html RHSA-2017:0329 http://rhn.redhat.com/errata/RHSA-2017-0329.html RHSA-2017:0330 http://rhn.redhat.com/errata/RHSA-2017-0330.html RHSA-2017:0331 http://rhn.redhat.com/errata/RHSA-2017-0331.html RHSA-2017:0332 http://rhn.redhat.com/errata/RHSA-2017-0332.html RHSA-2017:0333 http://rhn.redhat.com/errata/RHSA-2017-0333.html RHSA-2017:0334 http://rhn.redhat.com/errata/RHSA-2017-0334.html RHSA-2017:0344 http://rhn.redhat.com/errata/RHSA-2017-0344.html RHSA-2017:0350 http://rhn.redhat.com/errata/RHSA-2017-0350.html RHSA-2017:0396 http://rhn.redhat.com/errata/RHSA-2017-0396.html RHSA-2017:0454 http://rhn.redhat.com/errata/RHSA-2017-0454.html [debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html [oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode http://www.openwall.com/lists/oss-security/2017/02/01/6 [qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615) https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615 https://support.citrix.com/article/CTX220771 https://support.citrix.com/article/CTX220771