{"action":"Upgrade xen to 4.7.1-r5 or later.","affected":[{"fixed":"4.7.1-r5","introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.15","exploited":false,"fixed_versions":["4.7.1-r5"],"id":"tcs_01M5N9DAVX2XFBPDNGNEY09JFY","modified_at":"2026-06-15T18:18:06.767757440Z","published_at":"2018-07-27T19:29:00.330Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2017-2620","https://security.alpinelinux.org/vuln/CVE-2017-2620"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2017-2620#Alpine:v3.15/xen","url":"https://osv.dev/vulnerability/ALPINE-CVE-2017-2620"}],"summary":"Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cput"}