CVE-2017-10806

Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.

• CWE-787

• http://www.debian.org/security/2017/dsa-3925Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/07/07/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/99475Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1468496Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlThird Party Advisory
• https://lists.nongnu.org/archive/html/qemu-devel/2017-05/msg03087.htmlMailing List, Patch, Vendor Advisory
• http://www.debian.org/security/2017/dsa-3925Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/07/07/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/99475Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1468496Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlThird Party Advisory
• https://lists.nongnu.org/archive/html/qemu-devel/2017-05/msg03087.htmlMailing List, Patch, Vendor Advisory

Published

Aug 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1080Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10800When GraphicsMagick 1.3.25 processes a MATLAB image in coder…
• CVE-2017-10801phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the …
• CVE-2017-10803In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo E…
• CVE-2017-10804In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo E…
• CVE-2017-10805In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo E…
• CVE-2017-10807JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to aut…
• CVE-2017-1081In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE…
• CVE-2017-10810Memory leak in the virtio_gpu_object_create function in driv…7.5
• CVE-2017-10811Buffalo WCR-1166DS devices with firmware 1.30 and earlier al…
• CVE-2017-10812Untrusted search path vulnerability in Photo Collection PC S…
• CVE-2017-10813CG-WLR300NM Firmware version 1.90 and earlier allows an atta…