CVE-2017-16845 PUBLISHED

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.

EPSS 2.07% · 83.8th percentile

Risk Scores

EPSS Score
2.07%
83.8th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSqemu0, 1:2.10+dfsg-0ubuntu3, 1:2.10+dfsg-0ubuntu4
Ubuntu:16.04:LTSqemu1:2.5+dfsg-1ubuntu5, 1:2.5+dfsg-5ubuntu1, 1:2.5+dfsg-5ubuntu2

Timeline

References

Open in Interactive Console →