CVE-2018-19364

Published: Dic 13, 2018 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-11057 Aliases: GSD-2018-19364

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 5,5

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: none

Integrity: none

Availability: high

LOW 2,1

Source: [email protected]

Access Vector: local

Access Complexity: low

Authentication: none

Confidentiality: none

Integrity: none

Availability: partial

Description

AI Translation Available

hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0008

Percentile

0,2th

Updated

EPSS Score Trend (Last 90 Days)

416

Use After Free

Stable

Abstraction: Variant Structure: Simple

Common Consequences

Security Scopes Affected:

Integrity Availability Confidentiality

Potential Impacts:

Modify Memory Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands

Applicable Platforms

Languages: C, C++, Memory-Unsafe

Likelihood of Exploit: High

View CWE Details

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 18.10

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Qemu by Qemu

Product Information

Vendor Qemu

Product Qemu

Version Range Affected

To 3.0.0 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 18.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Qemu by Qemu

Product Information

Vendor Qemu

Product Qemu

Version 3.1.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:qemu:qemu:3.1.0:rc1:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Leap by Opensuse

Product Information

Vendor Opensuse

Product Leap

Version 42.3

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 14.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Debian Linux by Debian

Product Information

Vendor Debian

Product Debian Linux

Version 8.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Qemu by Qemu

Product Information

Vendor Qemu

Product Qemu

Version 3.1.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:qemu:qemu:3.1.0:rc0:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Fedora by Fedoraproject

Product Information

Vendor Fedoraproject

Product Fedora

Version 29

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Debian Linux by Debian

Product Information

Vendor Debian

Product Debian Linux

Version 9.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 16.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

http://lists.opensuse.org/opensuse-security-announce/2019-0…

Mailing List Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html

https://lists.debian.org/debian-lts-announce/2019/01/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/01/msg00023.html

https://lists.fedoraproject.org/archives/list/package-annou…

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg01…

Mailing List Patch Vendor Advisory

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg01139.html

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg02…

Mailing List Patch Vendor Advisory

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg02795.html

https://seclists.org/bugtraq/2019/May/76

Mailing List Third Party Advisory

https://seclists.org/bugtraq/2019/May/76

https://usn.ubuntu.com/3826-1/

Third Party Advisory

https://usn.ubuntu.com/3826-1/

https://www.debian.org/security/2019/dsa-4454

Third Party Advisory

https://www.debian.org/security/2019/dsa-4454

http://www.openwall.com/lists/oss-security/2018/11/20/1

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2018/11/20/1

http://lists.opensuse.org/opensuse-security-announce/2019-0…

Mailing List Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html

https://lists.debian.org/debian-lts-announce/2019/01/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/01/msg00023.html

https://lists.fedoraproject.org/archives/list/package-annou…

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg01…

Mailing List Patch Vendor Advisory

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg01139.html

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg02…

Mailing List Patch Vendor Advisory

https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg02795.html

https://seclists.org/bugtraq/2019/May/76

Mailing List Third Party Advisory

https://seclists.org/bugtraq/2019/May/76

https://usn.ubuntu.com/3826-1/

Third Party Advisory

https://usn.ubuntu.com/3826-1/

https://www.debian.org/security/2019/dsa-4454

Third Party Advisory

https://www.debian.org/security/2019/dsa-4454

http://www.openwall.com/lists/oss-security/2018/11/20/1

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2018/11/20/1

CVE-2018-19364

Description

EPSS (Exploit Prediction Scoring System)

EPSS (Exploit Prediction Scoring System)

EPSS Score Trend (Last 90 Days)

Use After Free

Common Consequences

Applicable Platforms

Ubuntu Linux by Canonical

Product Information

Qemu by Qemu

Product Information

Ubuntu Linux by Canonical

Product Information

Qemu by Qemu

Product Information

Leap by Opensuse

Product Information

Ubuntu Linux by Canonical

Product Information

Debian Linux by Debian

Product Information

Qemu by Qemu

Product Information

Fedora by Fedoraproject

Product Information

Debian Linux by Debian

Product Information

Ubuntu Linux by Canonical

Product Information

Iscriviti alla newsletter