CVE-2018-18849

—

CVSS 3.0

5.5 medium

EPSS

<1%p45

Published

Mar 21, 2019 (Mar 21, 2019)

Modified

Jun 17, 2026

Description

In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.

Vendors: qemu opensuse fedoraproject canonical
Products: qemu, leap, fedora, ubuntu linux
Weakness: CWE-125
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.