Wind River Support Network

HomeDefectsLIN10-3181

Fixed

LIN10-3181 : Security Advisory - qemu - CVE-2018-5683

Created: Jan 30, 2018 Updated: Dec 3, 2018

Resolved Date: Feb 6, 2018

Found In Version: 10.17.41.1

Fix Version: 10.17.41.4

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.

https://nvd.nist.gov/vuln/detail/CVE-2018-5683

Other Downloads

CVEs

CVE-2018-5683