EUVD-2018-10563

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Out-of-bounds access in Qemu 3.0.0 due to invalid msg_len in lsi_do_msgin function.

Reporter	Title	Published	Views	Family All 112
CNVD	QEMU Denial of Service Vulnerability (CNVD-2018-26705)	28 Nov 201800:00	–	cnvd
CVE	CVE-2018-18849	17 Mar 201919:56	–	cve
Cvelist	CVE-2018-18849	17 Mar 201919:56	–	cvelist
Debian	[SECURITY] [DLA 1781-1] qemu security update	9 May 201918:42	–	debian
Debian	[SECURITY] [DSA 4454-1] qemu security update	30 May 201918:06	–	debian
Debian CVE	CVE-2018-18849	17 Mar 201919:56	–	debiancve
Tenable Nessus	Debian DLA-1781-1 : qemu security update	10 May 201900:00	–	nessus
Tenable Nessus	Debian DSA-4454-1 : qemu - security update	31 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : qemu-kvm (EulerOS-SA-2020-1790)	1 Jul 202000:00	–	nessus
Tenable Nessus	Fedora 29 : 2:qemu (2018-87f2ace20d)	3 Jan 201900:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "eda00490-893e-381e-b3b6-a6b6af2ac013",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "29896f24-1703-30bb-9a0c-2e90f976b550",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2018-18849.html
debian	www.debian.org/security/2019/dsa-4454
ubuntu	www.ubuntu.com/security/CVE-2018-18849
linux	www.linux.oracle.com/cve/CVE-2018-18849.html
usn	www.usn.ubuntu.com/3826-1/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQIBTGNRDQEXGAAYHE4JIWFAYFNHZ6QP/
lists	www.lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html
lists	www.lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html
lists	www.lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html
openwall	www.openwall.com/lists/oss-security/2018/11/01/1

07 Oct 2025 00:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 35.5

CVSS 22.1

EPSS0.00051