PT-2018-2473 · Qemu+5 · Qemu+5

Jiang Xin + 1 · Published 2018-01-23 · Updated 2020-10-15 · CVE-2018-5683

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue is related to the vga draw text function in QEMU, which is associated with incorrect input validation. This can lead to a denial of service, causing an out-of-bounds read and a crash of the QEMU process. Local OS guest privileged users can exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2018-1226

ALT-PU-2018-1657

BDU:2019-00716

CESA-2018_0816

CESA-2018_2162

CVE-2018-5683

DLA-1497-1

DSA-4213-1

OPENSUSE-SU-2018_0459-1

OPENSUSE-SU-2018_0780-1

RHSA-2018:0816

RHSA-2018:1104

RHSA-2018:1113

RHSA-2018:2162

RHSA-2018_0816

RHSA-2018_2162

SUSE-SU-2018:0438-1

SUSE-SU-2018:0472-1

SUSE-SU-2018:0601-1

SUSE-SU-2018:0609-1

SUSE-SU-2018:0638-1

SUSE-SU-2018:0678-1

SUSE-SU-2018:0762-1

SUSE-SU-2018:0831-1

SUSE-SU-2018:1077-1

SUSE-SU-2018:1308-1

USN-3575-1

USN-3575-2

Affected Products

Alt Linux

Centos

Qemu

Red Hat

Suse

Ubuntu

References · 273

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• 🔥 https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2018:0678-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15289 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14167 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13711 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-5683 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7377 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:1308-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15124 · Vendor Advisory