Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-10839

Опубликовано: 16 окт. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4
CVSS3: 6.5

Описание

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.

РелизСтатусПримечание
bionic

released

1:2.11+dfsg-1ubuntu7.8
cosmic

released

1:2.12+dfsg-3ubuntu8.1
devel

released

1:2.12+dfsg-3ubuntu9
disco

released

1:2.12+dfsg-3ubuntu9
eoan

released

1:2.12+dfsg-3ubuntu9
esm-infra-legacy/trusty

not-affected

2.0.0+dfsg-2ubuntu1.44
esm-infra/bionic

not-affected

1:2.11+dfsg-1ubuntu7.8
esm-infra/focal

not-affected

1:2.12+dfsg-3ubuntu9
esm-infra/xenial

not-affected

1:2.5+dfsg-5ubuntu10.33
focal

released

1:2.12+dfsg-3ubuntu9

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

EPSS

Процентиль: 84%
0.02311
Низкий

4 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
больше 6 лет назад

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.

CVSS3: 6.5
nvd
больше 6 лет назад

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.

CVSS3: 6.5
debian
больше 6 лет назад

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is ...

CVSS3: 6.5
github
около 3 лет назад

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.

oracle-oval
больше 5 лет назад

ELSA-2019-2892: qemu-kvm security update (IMPORTANT)

EPSS

Процентиль: 84%
0.02311
Низкий

4 Medium

CVSS2

6.5 Medium

CVSS3