CVE-2018-5683
qemu: The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds...
CVE-2018-5683 is fixed in 17 products on 1 platform, first by qemu 1:2.11+dfsg-1ubuntu2, released January 22, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0068
52nd percentile
The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| qemu · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-block-extra · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-block-extra 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-guest-agent · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-guest-agent 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-kvm · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-kvm 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system-arm · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system-arm 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system-common · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system-common 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system-mips · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system-mips 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system-misc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system-misc 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system-ppc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system-ppc 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system-s390x · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system-s390x 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system-sparc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system-sparc 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-system-x86 · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-system-x86 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-user · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-user 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-user-binfmt · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-user-binfmt 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-user-static · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-user-static 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |
| qemu-utils · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | qemu-utils 1:2.11+dfsg-1ubuntu2 | Jan 22, 2018 |