CVE-2017-7980

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.

• CWE-119

• http://ubuntu.com/usn/usn-3289-1Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/04/21/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/102129Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/97955Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:0980Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0981Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0982Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0983Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0984Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0988Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1205Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1206Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1430Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1441Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1430056Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201706-03Patch, Third Party Advisory, VDB Entry
• https://support.citrix.com/article/CTX230138Third Party Advisory
• http://ubuntu.com/usn/usn-3289-1Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/04/21/1Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/102129Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/97955Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:0980Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0981Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0982Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0983Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0984Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:0988Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1205Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1206Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1430Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1441Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1430056Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201706-03Patch, Third Party Advisory, VDB Entry
• https://support.citrix.com/article/CTX230138Third Party Advisory

Published

Jul 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7974A path traversal information disclosure vulnerability exists…
• CVE-2017-7975Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of…
• CVE-2017-7976Artifex jbig2dec 0.13 allows out-of-bounds writes and reads …
• CVE-2017-7977The Screensavercc component in eLux RP before 5.5.0 allows a…9.8
• CVE-2017-7978Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) …
• CVE-2017-7979The cookie feature in the packet action API implementation i…
• CVE-2017-7981Tuleap before 9.7 allows command injection via the PhpWiki 1…
• CVE-2017-7982Integer overflow in the plist_from_bin function in bplist.c …
• CVE-2017-7983In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), mail sent u…
• CVE-2017-7984In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate …
• CVE-2017-7985In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate …
• CVE-2017-7986In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate …