Lucene search

GoogleOSV:CVE-2018-19665

HistoryDec 06, 2018 - 11:29 p.m.

CVE-2018-19665

2018-12-0623:29:01

Google

osv.dev

5.7 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

Low

2.7 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

22.9%

JSON

The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.

CPENameOperatorVersion
qemueq2.11.0-rc3
qemueq2.8.0-rc4
qemueq2.10.0-rc0
qemueq2.12.0-rc4
qemueq2.9.0-rc0
qemueq2.3.0-rc3
qemueq1.1-rc1
qemueq1.5.0-rc0
qemueq0.5.0
qemueq2.4.0-rc0

Name	Operator	Version
qemu	eq	2.11.0-rc3
qemu	eq	2.8.0-rc4
qemu	eq	2.10.0-rc0
qemu	eq	2.12.0-rc4
qemu	eq	2.9.0-rc0
qemu	eq	2.3.0-rc3
qemu	eq	1.1-rc1
qemu	eq	1.5.0-rc0
qemu	eq	0.5.0
qemu	eq	2.4.0-rc0

Rows per page:

1-10 of 1501

References

lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html

www.openwall.com/lists/oss-security/2018/11/29/1

www.securityfocus.com/bid/106050

lists.gnu.org/archive/html/qemu-devel/2018-11/msg03570.html

5.7 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

Low

2.7 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

22.9%

JSON

Related for OSV:CVE-2018-19665