Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-3xye-q9rz-p7es
Vulnerability ID VCID-3xye-q9rz-p7es
Aliases CVE-2007-2893
Summary Multiple vulnerabilities have been discovered in Bochs, possibly allowing for the execution of arbitrary code or a Denial of Service.
Status Published
Exploitability 0.5
Weighted Severity 6.5
Risk 3.2
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2007-2893
cvssv2 7.2 https://nvd.nist.gov/vuln/detail/CVE-2007-2893
Reference id Reference type URL
http://bugs.gentoo.org/show_bug.cgi?id=188148
http://osvdb.org/36799
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2893.json
https://api.first.org/data/v1/epss?cve=CVE-2007-2893
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2893
http://secunia.com/advisories/25470
http://secunia.com/advisories/26364
http://secunia.com/advisories/27715
http://security.gentoo.org/glsa/glsa-200711-21.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/34508
http://taviso.decsystem.org/virtsec.pdf
http://www.debian.org/security/2007/dsa-1351
http://www.securityfocus.com/bid/24246
http://www.vupen.com/english/advisories/2007/1936
237347 https://bugzilla.redhat.com/show_bug.cgi?id=237347
427144 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427144
cpe:2.3:a:bochs_project:bochs:2.3:-:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:bochs_project:bochs:2.3:-:*:*:*:*:*:*
CVE-2007-2893 https://nvd.nist.gov/vuln/detail/CVE-2007-2893
GLSA-200711-21 https://security.gentoo.org/glsa/200711-21
No exploits are available.
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2007-2893
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.18534
EPSS Score 0.00059
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:02:03.538228+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200711-21 38.0.0