[Secure-testing-team] Bug#880832: qemu: CVE-2017-15289: cirrus: OOB access issue in mode4and5 write functions

[Salvatore Bonaccorso]

Source: qemu
Version: 1:2.10.0+dfsg-2
Severity: important
Tags: patch security upstream fixed-upstream
Forwarded: https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02557.html

Hi,

the following vulnerability was published for qemu.

CVE-2017-15289[0]:
| The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow
| local OS guest privileged users to cause a denial of service
| (out-of-bounds write access and Qemu process crash) via vectors
| related to dst calculation.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-15289
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15289
[1] https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg02557.html
[2] https://git.qemu.org/gitweb.cgi?p=qemu.git;a=commit;h=eb38e1bc3740725ca29a535351de94107ec58d51

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore