CVE-2018-7858
qemu: Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privilege...
CVE-2018-7858 is fixed in 17 products on 1 platform, first by qemu 1:2.11+dfsg-1ubuntu7.1, released March 11, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0061
49th percentile
Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| qemu · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-block-extra · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-block-extra 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-guest-agent · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-guest-agent 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-kvm · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-kvm 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-arm · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-arm 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-common · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-common 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-mips · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-mips 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-misc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-misc 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-ppc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-ppc 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-s390x · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-s390x 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-sparc · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-sparc 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-system-x86 · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-system-x86 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-user · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-user 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-user-binfmt · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-user-binfmt 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-user-static · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-user-static 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |
| qemu-utils · Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | qemu-utils 1:2.11+dfsg-1ubuntu7.1 | Mar 11, 2018 |