CVE-2017-2620
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_c...
Affects 10 products across 5 vendors.
Software reads data past the boundary of an allocated buffer, leaking sensitive information or causing crashes.
Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
This vulnerability was disclosed in 2018. A critical vulnerability affects Citrix systems (CVE-2017-2620). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
BSID: BS-2018-GLOBAL-221091-C • Model: rule-based-v1 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2017-2620?
What is the CVSS score for CVE-2017-2620?
Is CVE-2017-2620 actively exploited?
How do I remediate CVE-2017-2620?
What systems are affected by CVE-2017-2620?
| CVE ID | CVE-2017-2620 |
|---|---|
| BSID | BS-2018-GLOBAL-221091-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| Published | 2018-07-27 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Domains | |
| Source | NVD |
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
Source: NIST NVD / MITRE CVE Database
Vulnerability details: Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Exploitation Likelihood: LOW
| Vendor | Product | Affected Versions |
|---|---|---|
| Citrix | Xenserver | 6.0.2 6.2.0 6.5 7.0 7.1 |
| Debian | Debian Linux | 7.0 |
| Qemu | Qemu | 2.8 < 2.8.0 |
| Redhat | Openstack | 5.0 6.0 7.0 8 9 10 |
| Redhat | Enterprise Linux Server Aus | 7.3 7.4 |
| Redhat | Enterprise Linux Server Eus | 7.3 7.4 7.5 |
| Redhat | Enterprise Linux Workstation | 6.0 7.0 |
| Redhat | Enterprise Linux Server | 6.0 7.0 |
| Redhat | Enterprise Linux Desktop | 6.0 7.0 |
| Xen | Xen | ≤ 4.7.1 |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | rule-based-v1 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 9efbbf24af1986113f4f330df44dd66b8e0e6373c3bf97d97e08c9793c9fdfbe37a80573e37364e9689f9610643b2b0e7d6901f70480eabfce86045fbe593e4b |
Critical Severity - Know Your Exposure
A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →