CVE-2017-15289

MEDIUM

The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors r...

Affects 1 product across 1 vendor.

CVSS 3.16.0
EPSS0.5%
Percentile39th
PatchPatched
CVSS Vector — Plain English Requires local access, low complexity, high privileges required, no user interaction needed, can impact systems beyond the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-787: Out-of-Bounds Write

Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2017. A medium severity vulnerability affects Qemu systems (CVE-2017-15289). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2017-GLOBAL-116433-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2017-15289?
This vulnerability was disclosed in 2017. A medium severity vulnerability affects Qemu systems (CVE-2017-15289). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2017-15289?
CVE-2017-15289 has CVSS 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H. EPSS: 0.5%.
Is CVE-2017-15289 actively exploited?
No confirmed active exploitation of CVE-2017-15289 as of 2026-05-30.
How do I remediate CVE-2017-15289?
Priority: MONITOR.
What systems are affected by CVE-2017-15289?
CVE-2017-15289 affects Qemu Qemu.
Vulnerability Details
CVE IDCVE-2017-15289
BSIDBS-2017-GLOBAL-116433-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Published2017-10-16
Last Modified2026-05-13
ICS Relevance15%
Weakness (CWE)
Out-of-Bounds Write
SourceNVD
Official Description

The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation. CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Qemu Qemu ≤ 2.10.2
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 3286 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashf33522aeead627bc5c8bbadbc610e8c25d41ae94bd4e3556409c96a22d6c4ad0d3f6c1023c010b9213191fbc1a8e88af0b9c1f2f3f32d052f760da04fe51bf82
Related CVEs affecting Qemu
CVE-2022-36648 10.0 The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model ... CVE-2015-8556 10.0 Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1. CVE-2017-16845 10.0 hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during gue... CVE-2009-3616 9.9 Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.... CVE-2017-2620 9.9 Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator...
View all Qemu CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →