Out-of-bounds read in QEMU - CVE-2018-5683

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU10941

Out-of-bounds read in QEMU - CVE-2018-5683

Published: March 12, 2018


Vulnerability identifier: #VU10941
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-5683
CWE-ID: CWE-125
Exploitation vector: Adjecent network
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an adjacent low-privileged attacker to cause DoS condition on the target system.

The weakness exists in the vga_draw_text function due to out-of-bounds read. A remote attacker can leverage improper memory address validation, trigger memory error and cause QEMU process to crash.

Affected software

QEMU
Amazon Linux AMI
Debian Linux
Gentoo Linux
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Power, big endian
SUSE Linux
Fedora
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization
qemu

How to mitigate CVE-2018-5683

Install update from vendor's website.

qemu - update to 2.10.2-1.fc27

External References

Related Security Bulletins