QwikSec

Security Database

CVE

CWE

Training

CVE-2018-16847

Published: Nov 2, 2018

Modified: Aug 5, 2024

PUBLISHED

CVSS v3.0

7.0

HIGH

Description

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.

Vendor	Product	Versions
[UNKNOWN]	QEMU:	affected `n/a`

Weaknesses (CWE)

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

High

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16847

x_refsource_CONFIRM

[oss-security] 20181102 CVE-2018-16847 QEMU: nvme: Out-of-bounds r/w buffer access in cmb operations

mailing-list

x_refsource_MLIST

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg00200.html

x_refsource_MISC

vendor-advisory

x_refsource_UBUNTU

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.