CVE-2018-18849

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2018/11/01/1Mailing List, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00010.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQIBTGNRDQEXGAAYHE4JIWFAYFNHZ6QP/
https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg06401.htmlPatch, Third Party Advisory
https://seclists.org/bugtraq/2019/May/76
https://security.netapp.com/advisory/ntap-20190411-0006/Third Party Advisory
https://usn.ubuntu.com/3826-1/Third Party Advisory
https://www.debian.org/security/2019/dsa-4454
http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2018/11/01/1Mailing List, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00010.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQIBTGNRDQEXGAAYHE4JIWFAYFNHZ6QP/
https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg06401.htmlPatch, Third Party Advisory
https://seclists.org/bugtraq/2019/May/76
https://security.netapp.com/advisory/ntap-20190411-0006/Third Party Advisory
https://usn.ubuntu.com/3826-1/Third Party Advisory
https://www.debian.org/security/2019/dsa-4454

Timeline

Published: Mar 21, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-18855.3IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information usi CVE-2018-188508.8In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could uplo CVE-2018-188528.8Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature CVE-2018-188537.5Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic CVE-2018-188547.5Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic CVE-2018-188567.8Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can com CVE-2018-188577.8Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can com CVE-2018-188587.8Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can com CVE-2018-188597.8Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can com CVE-2018-18865.3IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to unauthorized users.CVE-2018-188607.8A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configura CVE-2018-188619.8Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.