# CVE-2018-5683: qemu: The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds...

CVE-2018-5683 is fixed in 17 products on 1 platform, first by qemu 1:2.11+dfsg-1ubuntu2, released January 22, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-5683
- Priority: Routine
- CVSS: n/a (Low)
- EPSS: 0.0068
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jan 22, 2018

## Description

The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | qemu Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-block-extra Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-block-extra 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-block-extra-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-guest-agent Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-guest-agent 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-guest-agent-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-kvm Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-kvm 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-kvm-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system-arm Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system-arm 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-arm-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system-common Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system-common 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-common-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system-mips Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system-mips 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-mips-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system-misc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system-misc 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-misc-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system-ppc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system-ppc 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-ppc-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system-s390x Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system-s390x 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-s390x-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system-sparc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system-sparc 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-sparc-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-system-x86 Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-system-x86 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-x86-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-user Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-user 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-user-binfmt Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-user-binfmt 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-binfmt-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-user-static Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-user-static 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-static-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |
| Linux | qemu-utils Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu2 | [qemu-utils 1:2.11+dfsg-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-utils-1-2.11-dfsg-1ubuntu2.md) | Jan 22, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo