# CVE-2017-16845: qemu-user-binfmt: hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds a... CVE-2017-16845 is fixed in 17 products on 1 platform, first by qemu 1:2.11+dfsg-1ubuntu7.1, released March 11, 2018. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2017-16845 - Priority: Routine - CVSS: n/a (Low) - EPSS: 0.0294 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Nov 16, 2017 ## Description hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | qemu Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-block-extra Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-block-extra 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-block-extra-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-guest-agent Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-guest-agent 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-guest-agent-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-kvm Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-kvm 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-kvm-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system-arm Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-arm 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-arm-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system-common Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-common 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-common-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system-mips Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-mips 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-mips-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system-misc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-misc 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-misc-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system-ppc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-ppc 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-ppc-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system-s390x Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-s390x 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-s390x-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system-sparc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-sparc 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-sparc-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-system-x86 Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-x86 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-x86-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-user Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-user 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-user-binfmt Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-user-binfmt 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-binfmt-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-user-static Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-user-static 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-static-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | | Linux | qemu-utils Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-utils 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-utils-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo