CVE-2018-18438
published 2018-10-19CVE-2018-18438: Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.
medium5.5CVSS 3.0
AVLACLPRLUINSUCNINAH
Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | qemu | < qemu 1:3.1+dfsg-1 (bookworm) | qemu 1:3.1+dfsg-1 (bookworm) |
| qemu | qemu | >= 0 < 1:3.1+dfsg-1 | 1:3.1+dfsg-1 |
| qemu | qemu | >= 0 < 1:3.1+dfsg-1 | 1:3.1+dfsg-1 |
| qemu | qemu | >= 0 < 1:3.1+dfsg-1 | 1:3.1+dfsg-1 |
| qemu | qemu | >= 0 < 1:3.1+dfsg-1 | 1:3.1+dfsg-1 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | openstack | — | — |
| redhat | openstack | — | — |
| redhat | openstack | — | — |
| redhat | openstack | — | — |
| redhat | openstack | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM