[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2017-18030":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":51,"related":52,"reserved_at":9,"published_at":62,"modified_at":63,"state":64,"summary":65,"references_raw":74,"kevs":98,"epss":99,"epss_history":102,"metrics":365,"affected":375},"CVE-2017-18030","The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[],[],[27,29,31,33,35,37,39,41,43,45,47,49],{"_key":28},"SUSE-SU-2018:0438-1",{"_key":30},"UBUNTU-CVE-2017-18030",{"_key":32},"SUSE-SU-2018:0472-1",{"_key":34},"SUSE-SU-2018:0601-1",{"_key":36},"SUSE-SU-2018:0609-1",{"_key":38},"SUSE-SU-2018:0638-1",{"_key":40},"SUSE-SU-2018:0678-1",{"_key":42},"SUSE-SU-2018:0831-1",{"_key":44},"SUSE-SU-2018:1077-1",{"_key":46},"SUSE-SU-2018:1308-1",{"_key":48},"DLA-1497-1",{"_key":50},"DEBIAN-CVE-2017-18030",[],[53,54,55,56,57,58,59,60,61],{"_key":28},{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},"2018-01-23T18:00:00.000Z","2024-08-05T21:06:50.133Z","Modified",{"cisa_kev":66,"cisa_ransomware":66,"cisa_vendor":9,"epss_severity":67,"epss_score":68,"severity":69,"severity_score":70,"severity_version":71,"severity_source":72,"severity_vector":73,"severity_status":64},false,"low",0.00107,"medium",4.4,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",[75,83,87,93],{"url":76,"sources":77,"tags":79},"https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html",[78,72],"cve.org",[80,81,82],"Mailing List","X Refsource MLIST","Third Party Advisory",{"url":84,"sources":85,"tags":86},"http://www.openwall.com/lists/oss-security/2018/01/15/3",[78,72],[80,81,82],{"url":88,"sources":89,"tags":90},"http://www.securityfocus.com/bid/102520",[78,72],[91,92,82],"VDB Entry","X Refsource BID",{"url":94,"sources":95,"tags":96},"https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f153b563f8cf121aebf5a2fff5f0110faf58ccb3",[78,72],[97],"X Refsource CONFIRM",[],{"date":100,"score":68,"percentile":101},"2026-06-04",0.28476,[103,106,109,112,115,118,121,124,127,130,133,136,139,142,145,148,151,154,157,159,162,165,168,171,174,177,180,183,186,189,192,195,198,200,203,205,208,211,214,217,220,222,225,228,231,234,237,240,243,246,249,252,255,258,261,263,266,269,272,275,278,281,283,286,289,292,295,298,301,304,307,310,313,316,318,321,324,327,330,333,336,339,341,344,347,350,353,356,359,362],{"date":104,"score":68,"percentile":105},"2025-11-04",0.29566,{"date":107,"score":68,"percentile":108},"2025-11-05",0.29534,{"date":110,"score":68,"percentile":111},"2025-11-06",0.29555,{"date":113,"score":68,"percentile":114},"2025-11-07",0.29548,{"date":116,"score":68,"percentile":117},"2025-11-08",0.29554,{"date":119,"score":68,"percentile":120},"2025-11-09",0.29532,{"date":122,"score":68,"percentile":123},"2025-11-10",0.29511,{"date":125,"score":68,"percentile":126},"2025-11-11",0.29531,{"date":128,"score":68,"percentile":129},"2025-11-12",0.2957,{"date":131,"score":68,"percentile":132},"2025-11-13",0.29586,{"date":134,"score":68,"percentile":135},"2025-11-14",0.29588,{"date":137,"score":68,"percentile":138},"2025-11-15",0.29581,{"date":140,"score":68,"percentile":141},"2025-11-16",0.29549,{"date":143,"score":68,"percentile":144},"2025-11-17",0.29527,{"date":146,"score":68,"percentile":147},"2025-11-18",0.2464,{"date":149,"score":68,"percentile":150},"2025-11-19",0.24666,{"date":152,"score":68,"percentile":153},"2025-11-20",0.24678,{"date":155,"score":68,"percentile":156},"2025-11-21",0.29563,{"date":158,"score":68,"percentile":129},"2025-11-22",{"date":160,"score":68,"percentile":161},"2025-11-23",0.2953,{"date":163,"score":68,"percentile":164},"2025-11-24",0.2951,{"date":166,"score":68,"percentile":167},"2025-11-25",0.295,{"date":169,"score":68,"percentile":170},"2025-11-26",0.29501,{"date":172,"score":68,"percentile":173},"2025-11-27",0.29515,{"date":175,"score":68,"percentile":176},"2025-11-28",0.29493,{"date":178,"score":68,"percentile":179},"2025-11-29",0.29484,{"date":181,"score":68,"percentile":182},"2025-11-30",0.29458,{"date":184,"score":68,"percentile":185},"2025-12-01",0.29523,{"date":187,"score":68,"percentile":188},"2025-12-02",0.2955,{"date":190,"score":68,"percentile":191},"2025-12-03",0.29556,{"date":193,"score":68,"percentile":194},"2025-12-04",0.29472,{"date":196,"score":68,"percentile":197},"2025-12-05",0.29506,{"date":199,"score":68,"percentile":123},"2025-12-06",{"date":201,"score":68,"percentile":202},"2025-12-07",0.29485,{"date":204,"score":68,"percentile":176},"2025-12-08",{"date":206,"score":68,"percentile":207},"2025-12-09",0.29551,{"date":209,"score":68,"percentile":210},"2025-12-10",0.29616,{"date":212,"score":68,"percentile":213},"2025-12-11",0.29646,{"date":215,"score":68,"percentile":216},"2025-12-12",0.29669,{"date":218,"score":68,"percentile":219},"2025-12-13",0.2967,{"date":221,"score":68,"percentile":213},"2025-12-14",{"date":223,"score":68,"percentile":224},"2025-12-15",0.29613,{"date":226,"score":68,"percentile":227},"2025-12-16",0.29632,{"date":229,"score":68,"percentile":230},"2025-12-17",0.29682,{"date":232,"score":68,"percentile":233},"2025-12-18",0.29729,{"date":235,"score":68,"percentile":236},"2025-12-19",0.29743,{"date":238,"score":68,"percentile":239},"2025-12-20",0.2972,{"date":241,"score":68,"percentile":242},"2025-12-21",0.29671,{"date":244,"score":68,"percentile":245},"2025-12-22",0.29637,{"date":247,"score":68,"percentile":248},"2025-12-23",0.29612,{"date":250,"score":68,"percentile":251},"2025-12-24",0.29623,{"date":253,"score":68,"percentile":254},"2025-12-25",0.29696,{"date":256,"score":68,"percentile":257},"2025-12-26",0.29691,{"date":259,"score":68,"percentile":260},"2025-12-27",0.29692,{"date":262,"score":68,"percentile":248},"2025-12-28",{"date":264,"score":68,"percentile":265},"2025-12-29",0.29585,{"date":267,"score":68,"percentile":268},"2025-12-30",0.29584,{"date":270,"score":68,"percentile":271},"2025-12-31",0.2964,{"date":273,"score":68,"percentile":274},"2026-01-01",0.29761,{"date":276,"score":68,"percentile":277},"2026-01-02",0.29755,{"date":279,"score":68,"percentile":280},"2026-01-03",0.29739,{"date":282,"score":68,"percentile":251},"2026-01-04",{"date":284,"score":68,"percentile":285},"2026-01-05",0.2962,{"date":287,"score":68,"percentile":288},"2026-01-06",0.29631,{"date":290,"score":68,"percentile":291},"2026-01-07",0.29661,{"date":293,"score":68,"percentile":294},"2026-01-08",0.29685,{"date":296,"score":68,"percentile":297},"2026-01-09",0.29674,{"date":299,"score":68,"percentile":300},"2026-01-10",0.29664,{"date":302,"score":68,"percentile":303},"2026-01-11",0.29647,{"date":305,"score":68,"percentile":306},"2026-01-12",0.29598,{"date":308,"score":68,"percentile":309},"2026-01-13",0.29576,{"date":311,"score":68,"percentile":312},"2026-01-14",0.29622,{"date":314,"score":68,"percentile":315},"2026-01-15",0.29619,{"date":317,"score":68,"percentile":213},"2026-01-16",{"date":319,"score":68,"percentile":320},"2026-01-17",0.29643,{"date":322,"score":68,"percentile":323},"2026-01-18",0.29591,{"date":325,"score":68,"percentile":326},"2026-01-19",0.29558,{"date":328,"score":68,"percentile":329},"2026-01-20",0.29543,{"date":331,"score":68,"percentile":332},"2026-01-21",0.29495,{"date":334,"score":68,"percentile":335},"2026-01-22",0.29464,{"date":337,"score":68,"percentile":338},"2026-01-23",0.29536,{"date":340,"score":68,"percentile":338},"2026-01-24",{"date":342,"score":68,"percentile":343},"2026-01-25",0.29463,{"date":345,"score":68,"percentile":346},"2026-01-26",0.29381,{"date":348,"score":68,"percentile":349},"2026-01-27",0.29366,{"date":351,"score":68,"percentile":352},"2026-01-28",0.29349,{"date":354,"score":68,"percentile":355},"2026-01-29",0.29309,{"date":357,"score":68,"percentile":358},"2026-01-30",0.293,{"date":360,"score":68,"percentile":361},"2026-01-31",0.29299,{"date":363,"score":68,"percentile":364},"2026-02-01",0.29368,[366],{"source":72,"cvss_v2_0":367,"cvss_v3_0":9,"cvss_v3_1":372,"cvss_v4_0":9},{"baseScore":368,"baseSeverity":9,"vectorString":369,"impactScore":370,"exploitabilityScore":371},2.1,"AV:L/AC:L/Au:N/C:N/I:N/A:P",2.9,3.9,{"baseScore":70,"baseSeverity":373,"vectorString":73,"impactScore":374,"exploitabilityScore":368},"MEDIUM",6,[376,385],{"ecosystem":9,"name":377,"vendor":378,"product":379,"cpe_part":380,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":381},"debian linux","debian","debian_linux","o",[382],{"version":383,"is_range":66,"range_type":384,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0","cpe",{"ecosystem":9,"name":386,"vendor":386,"product":386,"cpe_part":387,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":388},"qemu","a",[389],{"version":390,"is_range":391,"range_type":384,"version_start":9,"version_start_type":9,"version_end":392,"version_end_type":393,"fixed_in":9},"lte2.8.1.1",true,"2.8.1.1","including"]