CVE-2018-19665: Integer Overflow
Published Dec 6, 2018
·Updated
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
Affected Software
3 affected components
Qemu Qemu<=3.0.1
Qemu Qemu=3.1.0-rc0
openSUSE Leap=42.3
Remediation
Patch Available
Event History
Dec 6, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-19665?
CVE-2018-19665 has a medium severity level due to its potential to cause memory corruption.
2
Which versions of QEMU are affected by CVE-2018-19665?
CVE-2018-19665 affects QEMU versions up to 3.0.1 and version 3.1.0-rc0.
3
How do I fix CVE-2018-19665?
To fix CVE-2018-19665, update QEMU to a version that is not vulnerable, specifically versions later than 3.1.0-rc0.
4
What type of vulnerability is CVE-2018-19665?
CVE-2018-19665 is a memory corruption vulnerability caused by mishandling negative values in the Bluetooth subsystem of QEMU.
5
Can CVE-2018-19665 be exploited remotely?
Yes, CVE-2018-19665 can potentially be exploited remotely if the vulnerable QEMU instance has Bluetooth functionality exposed.