Skip to content

CVE-2018-20124

CVE-2018-20124

This page contains facts from public vulnerability sources. Check the original advisory before updating.

hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value.

CVSS 5.5 · Medium · EPSS 0.5% · Fix available

Published: 2018-12-20T22:00:00.000Z
Updated: 2024-08-05T11:51:19.115Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
qemu Debian:12
Affected ranges
- ECOSYSTEM: < 1:4.1-1
Update to 1:4.1-1
qemu Debian:13
Affected ranges
- ECOSYSTEM: < 1:4.1-1
Update to 1:4.1-1
qemu Debian:14
Affected ranges
- ECOSYSTEM: < 1:4.1-1
Update to 1:4.1-1

Original sources

Check your server →