Lucene search
PRIOn knowledge basePRION:CVE-2018-10908HistoryAug 09, 2018 - 7:29 p.m.
Design/Logic Flaw
2018-08-0919:29:00
PRIOn knowledge base
www.prio-n.com
3
It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact other users of the host.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vdsm | lt | 4.20.37 | |
| virtualization | eq | 4.0 |
Related
nvd
nvd
CVE-2018-10908
2018-08-09 19:29:00
cve
cve
CVE-2018-10908
2018-08-09 19:29:00
osv
osv
CVE-2018-10908
2018-08-09 19:29:00
redhatcve
redhatcve
CVE-2018-10908
2018-08-09 01:50:22
nessus
nessus
RHEL 7 : vdsm (Unpatched Vulnerability)
2024-05-11 00:00:00
cvelist
cvelist
CVE-2018-10908
2018-08-09 19:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:20:04