ISOMAN

CVE

CVE-2018-5683

The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.

Severity
MEDIUM
CVSS
6
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.openwall.com/lists/oss-security/2018/01/15/2
  2. http://www.securityfocus.com/bid/102518
  3. https://access.redhat.com/errata/RHSA-2018:0816
  4. https://access.redhat.com/errata/RHSA-2018:1104
  5. https://access.redhat.com/errata/RHSA-2018:2162
  6. https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
  7. https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html
  8. https://usn.ubuntu.com/3575-1/
  9. https://www.debian.org/security/2018/dsa-4213
  10. http://www.openwall.com/lists/oss-security/2018/01/15/2
  11. http://www.securityfocus.com/bid/102518
  12. https://access.redhat.com/errata/RHSA-2018:0816
  13. https://access.redhat.com/errata/RHSA-2018:1104
  14. https://access.redhat.com/errata/RHSA-2018:2162
  15. https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
  16. https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html
  17. https://usn.ubuntu.com/3575-1/
  18. https://www.debian.org/security/2018/dsa-4213