Wind River Support Network

HomeDefectsLIN1018-3291

Fixed

LIN1018-3291 : Security Advisory - qemu - CVE-2018-20124

Created: Jan 1, 2019 Updated: Jun 24, 2020

Resolved Date: Jan 28, 2019

Found In Version: unknown

Fix Version: 10.18.44.4

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value.

https://nvd.nist.gov/vuln/detail/CVE-2018-20124

CVEs

CVE-2018-20124