CVE-2018-11806

Опубликовано: 13 июн. 2018

Источник: nvd

CVSS3: 8.2

CVSS2: 7.2

EPSS Низкий

Описание

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

Ссылки

http://www.openwall.com/lists/oss-security/2018/06/07/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/104400
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:2462
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2762
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2822
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2887
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2892
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1586245
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00010.html
Mailing List
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2018-06/msg01012.html
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2019/May/76
Mailing List
Third Party Advisory
https://usn.ubuntu.com/3826-1/
Third Party Advisory
https://www.debian.org/security/2019/dsa-4454
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-567/
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2018/06/07/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/104400
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:2462
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2762
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2822
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2887
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.12.1 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00055

Низкий

8.2 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-11806

CVSS3: 8.2

ubuntu

около 7 лет назад

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CVE-2018-11806

CVSS3: 5.1

redhat

около 7 лет назад

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CVE-2018-11806

CVSS3: 8.2

debian

около 7 лет назад

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via inc ...

GHSA-2vg8-mhwg-wq3f

CVSS3: 8.2

github

около 3 лет назад

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

BDU:2019-03333

CVSS3: 8.2

fstec

около 7 лет назад

Уязвимость функции m_cat эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю оказать воздействие на целостность данных, получить несанкционированный доступ к защищаемой информации, а также вызвать отказ в обслуживании

EPSS

Процентиль: 17%

0.00055

Низкий

8.2 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-787