CVE ID:	CVE-2018-18849
Description:	In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of- bounds access by triggering an invalid msg_len value.
Test IDs:	1.3.6.1.4.1.25623.1.0.891781
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-18849 Bugtraq: 20190531 [SECURITY] [DSA 4454-1] qemu security update (Google Search) https://seclists.org/bugtraq/2019/May/76 Debian Security Information: DSA-4454 (Google Search) https://www.debian.org/security/2019/dsa-4454 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LQIBTGNRDQEXGAAYHE4JIWFAYFNHZ6QP/ http://www.openwall.com/lists/oss-security/2018/11/01/1 https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg06401.html https://lists.debian.org/debian-lts-announce/2019/05/msg00010.html SuSE Security Announcement: openSUSE-SU-2018:4004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html SuSE Security Announcement: openSUSE-SU-2018:4111 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html SuSE Security Announcement: openSUSE-SU-2018:4147 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html https://usn.ubuntu.com/3826-1/