{
  "fix": "qemu-system-misc 1:2.11\u002Bdfsg-1ubuntu7.8",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-qemu-system-misc-1-2.11-dfsg-1ubuntu7.8",
  "summary": "qemu-system-misc 1:2.11\u002Bdfsg-1ubuntu7.8, released November 19, 2018, fixes 10 CVEs in qemu-system-misc. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "qemu-system-misc 1:2.11\u002Bdfsg-1ubuntu7.8 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2018-11-19T16:00:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 10 CVEs, none high severity",
  "supported": false,
  "cveCount": 10,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.24595,
  "appliesTo": [
    {
      "product": "qemu-system-misc",
      "productUrl": "https://patchblox.com/security/product/linux/qemu-system-misc",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.11\u002Bdfsg-1ubuntu7.8",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2018-12617",
      "url": "https://patchblox.com/security/cve/CVE-2018-12617",
      "title": "qemu: qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.5...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.24595,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-17958",
      "url": "https://patchblox.com/security/cve/CVE-2018-17958",
      "title": "qemu-system-misc: Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.06288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-17963",
      "url": "https://patchblox.com/security/cve/CVE-2018-17963",
      "title": "qemu-guest-agent: qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cau...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.04653,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-17962",
      "url": "https://patchblox.com/security/cve/CVE-2018-17962",
      "title": "qemu-system-arm: Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.04503,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10839",
      "url": "https://patchblox.com/security/cve/CVE-2018-10839",
      "title": "qemu-system-misc: Qemu emulator \u0026lt;= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which cou...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03082,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-11806",
      "url": "https://patchblox.com/security/cve/CVE-2018-11806",
      "title": "qemu: m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00807,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18849",
      "url": "https://patchblox.com/security/cve/CVE-2018-18849",
      "title": "qemu-guest-agent: In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.00561,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16847",
      "url": "https://patchblox.com/security/cve/CVE-2018-16847",
      "title": "qemu: An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00542,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-19364",
      "url": "https://patchblox.com/security/cve/CVE-2018-19364",
      "title": "qemu: hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leadi...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0053,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-18954",
      "url": "https://patchblox.com/security/cve/CVE-2018-18954",
      "title": "qemu-user-static: The pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or read access to Powe...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.00516,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-12T19:57:06Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}