High severity7.5NVD Advisory· Published Oct 9, 2018· Updated Apr 28, 2026
CVE-2018-17958
CVE-2018-17958
Description
Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.
Affected products
9- cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- lists.gnu.org/archive/html/qemu-devel/2018-09/msg03269.htmlnvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2018/10/08/1nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/105556nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2019:2425nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2019:2553nvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/01/msg00023.htmlnvdMailing ListThird Party Advisory
- seclists.org/bugtraq/2019/May/76nvdMailing ListThird Party Advisory
- usn.ubuntu.com/3826-1/nvdThird Party Advisory
- www.debian.org/security/2019/dsa-4454nvdThird Party Advisory
News mentions
0No linked articles in our index yet.