CVE-2018-18849

In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value

published March 17, 2019

CVSS
—
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00561 · 45.9th percentile
Published
2019-03-17T19:56Z
EPSS history
Timeline
  • 17 MAR 19:56Z
    In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value
    cvelistv5