Wind River Support Network

HomeDefectsLIN10-3550
Fixed

LIN10-3550 : Security Advisory - qemu - CVE-2018-7550

Created: Mar 15, 2018    Updated: Dec 3, 2018
Resolved Date: Apr 24, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.7
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access.

https://nvd.nist.gov/vuln/detail/CVE-2018-7550

Other Downloads


CVEs


Live chat
Online