CVE-2018-20216

HIGH

QEMU - Buffer Overflow

Title source: llm
STIX 2.1

Description

QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).

Scores

CVSS v3 7.5
EPSS 0.0050
EPSS Percentile 65.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-252 CWE-835
Status published
Products (5)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 18.10
qemu/qemu < 3.1.0
Published Dec 20, 2018
Tracked Since Feb 18, 2026