CVE-2018-17963: Integer Overflow
A potential integer overflow issue was found in the networking back-end of QEMU. It could occur while receiving packets, because it accepted packets with large size value. Such overflow could lead to OOB buffer access issue. A user inside guest could use this flaw to crash the QEMU process resulting in DoS.
Other sources
A potential integer overflow issue was found in the QEMU emulator. It could occur when a packet with large packet size is accepted and processed. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
Upstream fix: ------------- -> https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03267.html -> https://git.qemu.org/?p=qemu.git;a=commit;h=25c01bd19d0e4b66f357618aeefda1ef7a41e21a
Reference: ---------- -> https://www.openwall.com/lists/oss-security/2018/10/08/1
— Red Hat
qemudeliverpacketiov in net/net.c in Qemu accepts packet sizes greater than INTMAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2018-17963?
CVE-2018-17963 is a vulnerability in the networking back-end of QEMU, which could result in an integer overflow and OOB buffer access issue.
How severe is CVE-2018-17963?
CVE-2018-17963 has a severity rating of 9.8 (critical).
Which software is affected by CVE-2018-17963?
QEMU versions up to and including 3.0.0 are affected, as well as specific versions of qemu-kvm-ma, qemu-kvm-rhev, qemu (Debian), qemu (Ubuntu), QEMU qemu, Debian Debian Linux, Canonical Ubuntu Linux, Redhat Openstack, Redhat Virtualization, and Redhat Virtualization Manager.
How can I fix CVE-2018-17963?
To fix CVE-2018-17963, update QEMU to version 3.0.1 or later, or apply the relevant security patches for the specific software affected.
Where can I find more information about CVE-2018-17963?
You can find more information about CVE-2018-17963 on the QEMU mailing list archives, the QEMU Git repository, and the OSS Security mailing list.