Out-of-bounds read in QEMU - CVE-2018-7858

Vulnerability identifier: #VU11134

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-7858

CWE-ID: CWE-125

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The weakness exists due to improper VGA display updates. An adjacent attacker can use incorrect region calculations during VGA display updates, trigger out-of-bounds read and cause the service to crash.

QEMU
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
Fedora
Opensuse
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization
qemu

Install update from vendor's website.

qemu - update to 2.10.2-1.fc27

• http://www.openwall.com/lists/oss-security/2018/03/09/1

• Denial of service in QEMU
• Red Hat update for QEMU
• Red Hat update for QEMU
• Amazon Linux AMI update for qemu-kvm
• Red Hat update for kernel
• OpenSUSE Linux update for qemu
• Fedora 27 update for qemu