SB2017041162 - Heap-based buffer overflow in xen (Alpine package)

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017041162

SB2017041162 - Heap-based buffer overflow in xen (Alpine package)

Published: April 11, 2017 Updated: December 9, 2025

Security Bulletin ID SB2017041162
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Heap-based buffer overflow (CVE-ID: CVE-2016-9603)

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Cirrus CLGD 54xx VGA emulator's VNC display driver when a VNC client attempted to update its display after a VGA operation is performed by a guest. A local user inside a guest VM can trigger a hea-based buffer overflow and execute arbitrary code with privileges of the QEMU process.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.

References