Improper input validation in QEMU - CVE-2018-15746

Vulnerability identifier: #VU16553

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-15746

CWE-ID: CWE-20

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The vulnerability exists in qemu-seccomp.c due to an error when processing malicious input. An adjacent attacker can leverage mishandling of the seccomp policy for threads other than the main thread and cause the service to crash.

QEMU
Amazon Linux AMI
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Opensuse
Fedora
qemu-kvm (Red Hat package)
qemu-kvm-ma (Red Hat package)
qemu
Red Hat OpenStack
Red Hat OpenStack for IBM Power

Install update from vendor's website.

qemu-kvm (Red Hat package) - update to 1.5.3-175.el7
qemu-kvm-ma (Red Hat package) - update to 2.12.0-48.el7
qemu - update to 3.0.0-2.fc29

• https://lists.gnu.org/archive/html/qemu-devel/2018-08/msg04892.html

• OpenSUSE Linux update for qemu
• OpenSUSE Linux update for qemu
• Red Hat update for qemu-kvm-rhev
• Red Hat Enterprise Linux 7 update for qemu-kvm-ma
• Red Hat Enterprise Linux 7 update for qemu-kvm
• Amazon Linux AMI update for qemu-kvm
• Fedora 29 update for qemu