Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : QEMU vulnerabilities (USN-3826-1)

🗓️ 27 Nov 2018 00:00:00Reported by TenableType 
nessus
 nessus🔗 www.tenable.com👁 59 Views

The Ubuntu host is affected by multiple vulnerabilities in QEMU that could result in denial of service or arbitrary code execution. Vulnerabilities are associated with NE2000 device emulation, Slirp networking back-end, QEMU guest agent, NVM Express Controller emulation, RTL8139 and PCNET device emulation, large packet sizes, LSI53C895A device emulation, IPowerNV LPC controller, and Plan 9 File System support

Related
Refs
Code
ReporterTitlePublishedViews
Family
0day.today		QEMU Guest Agent 2.12.50 - Denial of Service Vulnerability
22 Jun 201800:00
–zdt
Tenable Nessus		Amazon Linux 2 : qemu-kvm (ALAS-2018-1073)
19 Sep 201800:00
–nessus
Tenable Nessus		Amazon Linux AMI : qemu-kvm (ALAS-2018-1073)
7 Sep 201800:00
–nessus
Tenable Nessus		CentOS 7 : qemu-kvm (CESA-2018:2462)
21 Aug 201800:00
–nessus
Tenable Nessus		CentOS 6 : qemu-kvm (CESA-2019:2892)
1 Oct 201900:00
–nessus
Tenable Nessus		Debian DLA-1599-1 : qemu security update
1 Dec 201800:00
–nessus
Tenable Nessus		Debian DLA-1646-1 : qemu security update
30 Jan 201900:00
–nessus
Tenable Nessus		Debian DLA-1694-1 : qemu security update
1 Mar 201900:00
–nessus
Tenable Nessus		Debian DLA-1781-1 : qemu security update
10 May 201900:00
–nessus
Tenable Nessus		Debian DSA-4338-1 : qemu - security update
13 Nov 201800:00
–nessus
Rows per page
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-3826-1. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include('compat.inc');

if (description)
{
  script_id(119216);
  script_version("1.9");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/09/03");

  script_cve_id(
    "CVE-2018-10839",
    "CVE-2018-11806",
    "CVE-2018-12617",
    "CVE-2018-16847",
    "CVE-2018-17958",
    "CVE-2018-17962",
    "CVE-2018-17963",
    "CVE-2018-18849",
    "CVE-2018-18954",
    "CVE-2018-19364"
  );
  script_xref(name:"USN", value:"3826-1");

  script_name(english:"Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : QEMU vulnerabilities (USN-3826-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple
vulnerabilities as referenced in the USN-3826-1 advisory.

    Daniel Shapira and Arash Tohidi discovered that QEMU incorrectly handled NE2000 device emulation. An
    attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service.
    (CVE-2018-10839)

    It was discovered that QEMU incorrectly handled the Slirp networking back-end. A privileged attacker
    inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or
    possibly execute arbitrary code on the host. In the default installation, when QEMU is used with libvirt,
    attackers would be isolated by the libvirt AppArmor profile. This issue only affected Ubuntu 14.04 LTS,
    Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-11806)

    Fakhri Zulkifli discovered that the QEMU guest agent incorrectly handled certain QMP commands. An attacker
    could possibly use this issue to crash the QEMU guest agent, resulting in a denial of service.
    (CVE-2018-12617)

    Li Qiang discovered that QEMU incorrectly handled NVM Express Controller emulation. An attacker inside the
    guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute
    arbitrary code on the host. In the default installation, when QEMU is used with libvirt, attackers would
    be isolated by the libvirt AppArmor profile. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10.
    (CVE-2018-16847)

    Daniel Shapira and Arash Tohidi discovered that QEMU incorrectly handled RTL8139 device emulation. An
    attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service.
    (CVE-2018-17958)

    Daniel Shapira and Arash Tohidi discovered that QEMU incorrectly handled PCNET device emulation. An
    attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service.
    (CVE-2018-17962)

    Daniel Shapira discovered that QEMU incorrectly handled large packet sizes. An attacker inside the guest
    could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2018-17963)

    It was discovered that QEMU incorrectly handled LSI53C895A device emulation. An attacker inside the guest
    could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2018-18849)

    Moguofang discovered that QEMU incorrectly handled the IPowerNV LPC controller. An attacker inside the
    guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only
    affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-18954)

    Zhibin Hu discovered that QEMU incorrectly handled the Plan 9 File System support. An attacker inside the
    guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2018-19364)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-3826-1");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-17963");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/13");
  script_set_attribute(attribute:"patch_publication_date", value:"2018/11/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2018/11/27");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-arm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-mips");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-misc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-ppc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-s390x");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-sparc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-system-x86");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-user");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-user-binfmt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-user-static");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-utils");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-block-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-guest-agent");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-keymaps");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:qemu-kvm");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2018-2025 Canonical, Inc. / NASL script (C) 2018-2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('14.04' >< os_release || '16.04' >< os_release || '18.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 14.04 / 16.04 / 18.04', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '14.04', 'pkgname': 'qemu', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-common', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-guest-agent', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-keymaps', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-kvm', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system-aarch64', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system-arm', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system-common', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system-mips', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system-misc', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system-ppc', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system-sparc', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-system-x86', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-user', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-user-static', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '14.04', 'pkgname': 'qemu-utils', 'pkgver': '2.0.0+dfsg-2ubuntu1.44', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-block-extra', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-guest-agent', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-kvm', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-aarch64', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-arm', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-common', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-mips', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-misc', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-ppc', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-s390x', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-sparc', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-system-x86', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-user', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-user-binfmt', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-user-static', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '16.04', 'pkgname': 'qemu-utils', 'pkgver': '1:2.5+dfsg-5ubuntu10.33', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-block-extra', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-guest-agent', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-kvm', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system-arm', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system-common', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system-mips', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system-misc', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system-ppc', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system-s390x', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system-sparc', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-system-x86', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-user', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-user-binfmt', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-user-static', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']},
    {'osver': '18.04', 'pkgname': 'qemu-utils', 'pkgver': '1:2.11+dfsg-1ubuntu7.8', 'cves': ['CVE-2018-10839', 'CVE-2018-11806', 'CVE-2018-12617', 'CVE-2018-16847', 'CVE-2018-17958', 'CVE-2018-17962', 'CVE-2018-17963', 'CVE-2018-18849', 'CVE-2018-18954', 'CVE-2018-19364']}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
  if (osver && pkgname && pkgver) {
    if (deb_check(release:osver, prefix:pkgname, reference:pkgver, cves:cves)) flag++;
  }
}

if (flag)
{
  var extra = '';
  extra += ubuntu_report_get();
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : extra
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'qemu / qemu-block-extra / qemu-common / qemu-guest-agent / etc');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Sep 2025 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS 27.5
CVSS 37 - 7.5
CVSS 3.17.5 - 9.8
EPSS0.25348
SSVC
ubuntu 14.04 ltsubuntu 16.04 ltsubuntu 18.04 ltsqemuvulnerabilitiesdenial of servicearbitrary code executionne2000 deviceslirp networkingqemu guest agentnvm express controllerrtl8139 devicepcnet devicelarge packet sizeslsi53c895a deviceipowernv lpc controllerplan 9 file system
59