VYPR
High severity7.5OSV Advisory· Published Dec 20, 2018· Updated Jun 17, 2026

CVE-2018-20191

CVE-2018-20191

Description

hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of service (NULL pointer dereference).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • QEMU/QemuOSV3 versions
    v0.1.0, v0.1.1, v0.1.3, …+ 2 more
    • (no CPE)range: v0.1.0, v0.1.1, v0.1.3, …
    • cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*range: <=3.1.0
    • (no CPE)
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.