# CVE-2018-7550: qemu: The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execut...

CVE-2018-7550 is fixed in 17 products on 1 platform, first by qemu 1:2.11+dfsg-1ubuntu7.1, released March 11, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-7550
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0061
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 28, 2018

## Description

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | qemu Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-block-extra Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-block-extra 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-block-extra-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-guest-agent Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-guest-agent 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-guest-agent-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-kvm Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-kvm 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-kvm-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system-arm Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-arm 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-arm-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system-common Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-common 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-common-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system-mips Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-mips 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-mips-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system-misc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-misc 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-misc-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system-ppc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-ppc 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-ppc-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system-s390x Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-s390x 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-s390x-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system-sparc Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-sparc 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-sparc-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-system-x86 Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-system-x86 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-system-x86-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-user Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-user 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-user-binfmt Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-user-binfmt 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-binfmt-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-user-static Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-user-static 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-user-static-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |
| Linux | qemu-utils Ubuntu 18.04.6 LTS (bionic) | 1:2.11+dfsg-1ubuntu7.1 | [qemu-utils 1:2.11+dfsg-1ubuntu7.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-qemu-utils-1-2.11-dfsg-1ubuntu7.1.md) | Mar 11, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo