CVE-2018-16847
Fixed in a distro release EPSS <1%CVSS 7.0
An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.
Products: qemu, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1:3.1+dfsg-1 |
| Debian 13 | qemu | 1:3.1+dfsg-1 |
| Debian 14 | qemu | 1:3.1+dfsg-1 |
| SUSE Linux Enterprise Desktop 12 SP4 | qemu | 2.11.2-5.5.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | qemu | 2.11.2-9.12.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | qemu | 2.11.2-9.17.1 |
| SUSE Linux Enterprise Module for Server Applications 15 | qemu | 2.11.2-9.17.1 |
| SUSE Linux Enterprise Module for Server Applications 15 | qemu | 2.11.2-9.12.2 |
| SUSE Linux Enterprise Server 12 SP4 | qemu | 2.11.2-5.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | qemu | 2.11.2-5.5.1 |
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.44 |
| Ubuntu 16.04 LTS | qemu | 1:2.5+dfsg-5ubuntu10.33 |
| Ubuntu 18.04 LTS | qemu | 1:2.11+dfsg-1ubuntu7.8 |