Vulnerability Details CVE-2018-18438
Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.7%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
References
- http://www.openwall.com/lists/oss-security/2018/10/17/3
- http://www.securityfocus.com/bid/105953
- https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg02396.html
- https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg02402.html
- http://www.openwall.com/lists/oss-security/2018/10/17/3
- http://www.securityfocus.com/bid/105953
- https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg02396.html
- https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg02402.html
Products affected by CVE-2018-18438
-
cpe:2.3:a:qemu:qemu:-
-
cpe:2.3:a:redhat:openstack:10
-
cpe:2.3:a:redhat:openstack:12
-
cpe:2.3:a:redhat:openstack:13
-
cpe:2.3:a:redhat:openstack:8
-
cpe:2.3:a:redhat:openstack:9
-
cpe:2.3:o:redhat:enterprise_linux:6.0
-
cpe:2.3:o:redhat:enterprise_linux:7.0