CVE-2018-17962

Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.

Link	Resource
https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03268.html	Exploit Mailing List
http://www.openwall.com/lists/oss-security/2018/10/08/1	Mailing List Third Party Advisory
https://www.debian.org/security/2018/dsa-4338	Third Party Advisory
https://usn.ubuntu.com/3826-1/	Third Party Advisory
https://linux.oracle.com/cve/CVE-2018-17962.html	Third Party Advisory
https://access.redhat.com/security/cve/cve-2018-17962	Third Party Advisory
https://www.suse.com/security/cve/CVE-2018-17962/	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2892

Configuration 1

cpe:2.3:a:qemu:qemu:2.8.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:2.1.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:2.12.0:*:*:*:*:*:*:* cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:*:*:* cpe:2.3:o:oracle:linux:7:0:*:*:*:*:*:*

---

Published : 2018-10-09 10:29

Updated : 2020-08-24 05:37

---

NVD link : CVE-2018-17962

Mitre link : CVE-2018-17962

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-190