Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2018-10839
Description:Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
Test IDs: 1.3.6.1.4.1.25623.1.1.2.2019.1368   1.3.6.1.4.1.25623.1.1.2.2019.1373  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-10839
DSA-4338
https://www.debian.org/security/2018/dsa-4338
RHSA-2019:2892
https://access.redhat.com/errata/RHSA-2019:2892
USN-3826-1
https://usn.ubuntu.com/3826-1/
[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update
https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
[oss-security] 20181008 Qemu: integer overflow issues
https://www.openwall.com/lists/oss-security/2018/10/08/1
[qemu-devel] 20180926 [PULL 21/25] ne2000: fix possible out of bound access in ne2000_receive
https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03273.html
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10839
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10839




© 1998-2025 E-Soft Inc. All rights reserved.