CVE-2017-16845
qemu-user-binfmt: hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds a...
CVE-2017-16845 is fixed in 17 products on 1 platform, first by qemu 1:2.11+dfsg-1ubuntu7.1, released March 11, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0294
87th percentile
hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| qemu · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-block-extra · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-block-extra 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-guest-agent · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-guest-agent 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-kvm · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-kvm 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-arm · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-arm 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-common · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-common 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-mips · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-mips 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-misc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-misc 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-ppc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-ppc 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-s390x · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-s390x 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-sparc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-sparc 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-x86 · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-x86 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-user · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-user 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-user-binfmt · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-user-binfmt 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-user-static · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-user-static 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-utils · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-utils 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |