CVE-2018-17958

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Oct 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-17967.8IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-ForCVE-2018-179606.1CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.CVE-2018-179618.6Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTCVE-2018-179627.5Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.CVE-2018-179639.8qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service CVE-2018-179646.1Aryanic HighPortal 12.5 has XSS via an Add Tags action.CVE-2018-179656.5ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c.CVE-2018-179666.5ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.CVE-2018-179676.5ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.CVE-2018-179687.5A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an externCVE-2018-179699.8Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.CVE-2018-17975.5IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse dire
CVE-2018-17958: High severity, CVSS 7.5 | Vulnix