CVE-2018-17962: Buffer Overflow
An integer overflow issue was found in the AMD PC-Net II NIC emulation in QEMU. It could occur while receiving packets, if the size value was greater than INTMAX. Such overflow would lead to stack buffer overflow issue. A user inside guest could use this flaw to crash the QEMU process resulting in DoS.
Other sources
Qemu emulator built with the AMD PC-Net II (Am79C970A) emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network.
A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
Upstream fix: ------------- -> https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03268.html
Reference: ---------- -> https://www.openwall.com/lists/oss-security/2018/10/08/1
— Red Hat
Qemu has a Buffer Overflow in pcnetreceive in hw/net/pcnet.c because an incorrect integer data type is used.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-17962.
What is the severity of CVE-2018-17962?
The severity of CVE-2018-17962 is high with a CVSS score of 7.5.
Which software is affected by CVE-2018-17962?
The software affected by CVE-2018-17962 includes QEMU versions 2.0.0 to 2.12.0, qemu-kvm version 2:0.12.1.2-2.506.el6_10.5, and various versions of QEMU in Debian and Ubuntu distributions.
How can I fix the vulnerability in QEMU?
To fix the vulnerability in QEMU, you should update to version 2.12.1 or later.
Are there any references available for CVE-2018-17962?
Yes, you can find references for CVE-2018-17962 at the following links: [Link 1](https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03268.html), [Link 2](https://www.openwall.com/lists/oss-security/2018/10/08/1), [Link 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1636775).