Vulnerability-Lookup

usn-3923-1

Vulnerability from osv_ubuntu

Published

2019-03-27 12:10

Modified

2026-02-10 04:41

Summary

qemu vulnerabilities

Details

Michael Hanselmann discovered that QEMU incorrectly handled the Media Transfer Protocol (MTP). An attacker inside the guest could use this issue to read or write arbitrary files and cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.10. (CVE-2018-16867)

Michael Hanselmann discovered that QEMU incorrectly handled the Media Transfer Protocol (MTP). An attacker inside the guest could use this issue to read arbitrary files, contrary to expectations. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-16872)

Zhibin Hu discovered that QEMU incorrectly handled the Plan 9 File System support. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2018-19489)

Li Quang and Saar Amar discovered multiple issues in the QEMU PVRDMA device. An attacker inside the guest could use these issues to cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.10. These issues were resolved by disabling PVRDMA support in Ubuntu 18.10. (CVE-2018-20123, CVE-2018-20124, CVE-2018-20125, CVE-2018-20126, CVE-2018-20191, CVE-2018-20216)

Michael Hanselmann discovered that QEMU incorrectly handled certain i2c commands. A local attacker could possibly use this issue to read QEMU process memory. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2019-3812)

It was discovered that QEMU incorrectly handled the Slirp networking back-end. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code on the host. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. (CVE-2019-6778)

References

URL

Type

	https://ubuntu.com/security/notices/USN-3923-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-16867	REPORT
	https://ubuntu.com/security/CVE-2018-16872	REPORT
	https://ubuntu.com/security/CVE-2018-19489	REPORT
	https://ubuntu.com/security/CVE-2018-20123	REPORT
	https://ubuntu.com/security/CVE-2018-20124	REPORT
	https://ubuntu.com/security/CVE-2018-20125	REPORT
	https://ubuntu.com/security/CVE-2018-20126	REPORT
	https://ubuntu.com/security/CVE-2018-20191	REPORT
	https://ubuntu.com/security/CVE-2018-20216	REPORT
	https://ubuntu.com/security/CVE-2019-3812	REPORT
	https://ubuntu.com/security/CVE-2019-6778	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-19489",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-6778",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-common",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-keymaps",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-aarch64",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@2.0.0+dfsg-2ubuntu1.45?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.0+dfsg-2ubuntu1.45"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.5.0+dfsg-3ubuntu5",
        "1.5.0+dfsg-3ubuntu6",
        "1.6.0+dfsg-2ubuntu1",
        "1.6.0+dfsg-2ubuntu2",
        "1.6.0+dfsg-2ubuntu3",
        "1.6.0+dfsg-2ubuntu4",
        "1.7.0+dfsg-2ubuntu1",
        "1.7.0+dfsg-2ubuntu2",
        "1.7.0+dfsg-2ubuntu3",
        "1.7.0+dfsg-2ubuntu4",
        "1.7.0+dfsg-2ubuntu5",
        "1.7.0+dfsg-2ubuntu7",
        "1.7.0+dfsg-2ubuntu8",
        "1.7.0+dfsg-2ubuntu9",
        "1.7.0+dfsg-3ubuntu1~ppa1",
        "1.7.0+dfsg-3ubuntu1",
        "1.7.0+dfsg-3ubuntu2",
        "1.7.0+dfsg-3ubuntu3",
        "1.7.0+dfsg-3ubuntu4",
        "1.7.0+dfsg-3ubuntu5",
        "1.7.0+dfsg-3ubuntu6",
        "1.7.0+dfsg-3ubuntu7",
        "2.0.0~rc1+dfsg-0ubuntu1",
        "2.0.0~rc1+dfsg-0ubuntu2",
        "2.0.0~rc1+dfsg-0ubuntu3",
        "2.0.0~rc1+dfsg-0ubuntu3.1",
        "2.0.0+dfsg-2ubuntu1",
        "2.0.0+dfsg-2ubuntu1.1",
        "2.0.0+dfsg-2ubuntu1.2",
        "2.0.0+dfsg-2ubuntu1.3",
        "2.0.0+dfsg-2ubuntu1.5",
        "2.0.0+dfsg-2ubuntu1.6",
        "2.0.0+dfsg-2ubuntu1.7",
        "2.0.0+dfsg-2ubuntu1.8",
        "2.0.0+dfsg-2ubuntu1.9",
        "2.0.0+dfsg-2ubuntu1.10",
        "2.0.0+dfsg-2ubuntu1.11",
        "2.0.0+dfsg-2ubuntu1.13",
        "2.0.0+dfsg-2ubuntu1.14",
        "2.0.0+dfsg-2ubuntu1.15",
        "2.0.0+dfsg-2ubuntu1.16",
        "2.0.0+dfsg-2ubuntu1.17",
        "2.0.0+dfsg-2ubuntu1.18",
        "2.0.0+dfsg-2ubuntu1.19",
        "2.0.0+dfsg-2ubuntu1.20",
        "2.0.0+dfsg-2ubuntu1.21",
        "2.0.0+dfsg-2ubuntu1.22",
        "2.0.0+dfsg-2ubuntu1.24",
        "2.0.0+dfsg-2ubuntu1.25",
        "2.0.0+dfsg-2ubuntu1.26",
        "2.0.0+dfsg-2ubuntu1.27",
        "2.0.0+dfsg-2ubuntu1.28",
        "2.0.0+dfsg-2ubuntu1.29",
        "2.0.0+dfsg-2ubuntu1.30",
        "2.0.0+dfsg-2ubuntu1.31",
        "2.0.0+dfsg-2ubuntu1.32",
        "2.0.0+dfsg-2ubuntu1.33",
        "2.0.0+dfsg-2ubuntu1.34",
        "2.0.0+dfsg-2ubuntu1.35",
        "2.0.0+dfsg-2ubuntu1.36",
        "2.0.0+dfsg-2ubuntu1.38",
        "2.0.0+dfsg-2ubuntu1.39",
        "2.0.0+dfsg-2ubuntu1.40",
        "2.0.0+dfsg-2ubuntu1.41",
        "2.0.0+dfsg-2ubuntu1.42",
        "2.0.0+dfsg-2ubuntu1.43",
        "2.0.0+dfsg-2ubuntu1.44"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-19489",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-6778",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-aarch64",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:2.5+dfsg-5ubuntu10.36?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.5+dfsg-5ubuntu10.36"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.3+dfsg-5ubuntu9",
        "1:2.3+dfsg-5ubuntu10",
        "1:2.4+dfsg-4ubuntu1",
        "1:2.4+dfsg-4ubuntu2",
        "1:2.4+dfsg-4ubuntu3",
        "1:2.4+dfsg-5ubuntu3",
        "1:2.5+dfsg-1ubuntu2",
        "1:2.5+dfsg-1ubuntu3",
        "1:2.5+dfsg-1ubuntu4",
        "1:2.5+dfsg-1ubuntu5",
        "1:2.5+dfsg-5ubuntu1",
        "1:2.5+dfsg-5ubuntu2",
        "1:2.5+dfsg-5ubuntu4",
        "1:2.5+dfsg-5ubuntu6",
        "1:2.5+dfsg-5ubuntu7",
        "1:2.5+dfsg-5ubuntu10",
        "1:2.5+dfsg-5ubuntu10.1",
        "1:2.5+dfsg-5ubuntu10.2",
        "1:2.5+dfsg-5ubuntu10.3",
        "1:2.5+dfsg-5ubuntu10.4",
        "1:2.5+dfsg-5ubuntu10.5",
        "1:2.5+dfsg-5ubuntu10.6",
        "1:2.5+dfsg-5ubuntu10.7",
        "1:2.5+dfsg-5ubuntu10.8",
        "1:2.5+dfsg-5ubuntu10.9",
        "1:2.5+dfsg-5ubuntu10.10",
        "1:2.5+dfsg-5ubuntu10.11",
        "1:2.5+dfsg-5ubuntu10.13",
        "1:2.5+dfsg-5ubuntu10.14",
        "1:2.5+dfsg-5ubuntu10.15",
        "1:2.5+dfsg-5ubuntu10.16",
        "1:2.5+dfsg-5ubuntu10.20",
        "1:2.5+dfsg-5ubuntu10.21",
        "1:2.5+dfsg-5ubuntu10.22",
        "1:2.5+dfsg-5ubuntu10.24",
        "1:2.5+dfsg-5ubuntu10.25",
        "1:2.5+dfsg-5ubuntu10.26",
        "1:2.5+dfsg-5ubuntu10.28",
        "1:2.5+dfsg-5ubuntu10.29",
        "1:2.5+dfsg-5ubuntu10.30",
        "1:2.5+dfsg-5ubuntu10.31",
        "1:2.5+dfsg-5ubuntu10.32",
        "1:2.5+dfsg-5ubuntu10.33",
        "1:2.5+dfsg-5ubuntu10.34",
        "1:2.5+dfsg-5ubuntu10.35"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-16872",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-19489",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-3812",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-6778",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:2.11+dfsg-1ubuntu7.12?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.11+dfsg-1ubuntu7.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.10+dfsg-0ubuntu3",
        "1:2.10+dfsg-0ubuntu4",
        "1:2.10+dfsg-0ubuntu5",
        "1:2.11+dfsg-1ubuntu1",
        "1:2.11+dfsg-1ubuntu2",
        "1:2.11+dfsg-1ubuntu4",
        "1:2.11+dfsg-1ubuntu5",
        "1:2.11+dfsg-1ubuntu6",
        "1:2.11+dfsg-1ubuntu7",
        "1:2.11+dfsg-1ubuntu7.1",
        "1:2.11+dfsg-1ubuntu7.2",
        "1:2.11+dfsg-1ubuntu7.3",
        "1:2.11+dfsg-1ubuntu7.4",
        "1:2.11+dfsg-1ubuntu7.5",
        "1:2.11+dfsg-1ubuntu7.6",
        "1:2.11+dfsg-1ubuntu7.7",
        "1:2.11+dfsg-1ubuntu7.8",
        "1:2.11+dfsg-1ubuntu7.9",
        "1:2.11+dfsg-1ubuntu7.10"
      ]
    }
  ],
  "aliases": [],
  "details": "Michael Hanselmann discovered that QEMU incorrectly handled the Media\nTransfer Protocol (MTP). An attacker inside the guest could use this issue\nto read or write arbitrary files and cause a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 18.10.\n(CVE-2018-16867)\n\nMichael Hanselmann discovered that QEMU incorrectly handled the Media\nTransfer Protocol (MTP). An attacker inside the guest could use this issue\nto read arbitrary files, contrary to expectations. This issue only affected\nUbuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-16872)\n\nZhibin Hu discovered that QEMU incorrectly handled the Plan 9 File System\nsupport. An attacker inside the guest could use this issue to cause QEMU to\ncrash, resulting in a denial of service. (CVE-2018-19489)\n\nLi Quang and Saar Amar discovered multiple issues in the QEMU PVRDMA\ndevice. An attacker inside the guest could use these issues to cause a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 18.10. These issues were resolved by disabling PVRDMA\nsupport in Ubuntu 18.10. (CVE-2018-20123, CVE-2018-20124, CVE-2018-20125,\nCVE-2018-20126, CVE-2018-20191, CVE-2018-20216)\n\nMichael Hanselmann discovered that QEMU incorrectly handled certain i2c\ncommands. A local attacker could possibly use this issue to read QEMU\nprocess memory. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10.\n(CVE-2019-3812)\n\nIt was discovered that QEMU incorrectly handled the Slirp networking\nback-end. An attacker inside the guest could use this issue to cause QEMU\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode on the host. In the default installation, when QEMU is used with\nlibvirt, attackers would be isolated by the libvirt AppArmor profile.\n(CVE-2019-6778)\n",
  "id": "USN-3923-1",
  "modified": "2026-02-10T04:41:29Z",
  "published": "2019-03-27T12:10:22Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3923-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-16867"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-16872"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-19489"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20123"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20124"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20125"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20126"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20191"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20216"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-3812"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-6778"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "qemu vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-16867",
    "UBUNTU-CVE-2018-16872",
    "UBUNTU-CVE-2018-19489",
    "UBUNTU-CVE-2018-20123",
    "UBUNTU-CVE-2018-20124",
    "UBUNTU-CVE-2018-20125",
    "UBUNTU-CVE-2018-20126",
    "UBUNTU-CVE-2018-20191",
    "UBUNTU-CVE-2018-20216",
    "UBUNTU-CVE-2019-3812",
    "UBUNTU-CVE-2019-6778"
  ]
}

ubuntu-cve-2018-16872

Vulnerability from osv_ubuntu

Published

2018-12-13 00:00

Modified

2025-09-08 16:45

Summary

Details

A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn't consider that the underlying filesystem may have changed since the time lstat(2) was called in usb_mtp_object_alloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS.

Severity

5.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

5.0 (Medium)


                    
                      CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

5.3 (Medium)


                    
                      CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-16872	REPORT
	https://lists.gnu.org/archive/html/qemu-devel/201…	REPORT
	https://www.openwall.com/lists/oss-security/2018/…	REPORT
	https://ubuntu.com/security/notices/USN-3923-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-16872	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:2.11+dfsg-1ubuntu7.12?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.11+dfsg-1ubuntu7.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.10+dfsg-0ubuntu3",
        "1:2.10+dfsg-0ubuntu4",
        "1:2.10+dfsg-0ubuntu5",
        "1:2.11+dfsg-1ubuntu1",
        "1:2.11+dfsg-1ubuntu2",
        "1:2.11+dfsg-1ubuntu4",
        "1:2.11+dfsg-1ubuntu5",
        "1:2.11+dfsg-1ubuntu6",
        "1:2.11+dfsg-1ubuntu7",
        "1:2.11+dfsg-1ubuntu7.1",
        "1:2.11+dfsg-1ubuntu7.2",
        "1:2.11+dfsg-1ubuntu7.3",
        "1:2.11+dfsg-1ubuntu7.4",
        "1:2.11+dfsg-1ubuntu7.5",
        "1:2.11+dfsg-1ubuntu7.6",
        "1:2.11+dfsg-1ubuntu7.7",
        "1:2.11+dfsg-1ubuntu7.8",
        "1:2.11+dfsg-1ubuntu7.9",
        "1:2.11+dfsg-1ubuntu7.10"
      ]
    }
  ],
  "aliases": [],
  "details": "A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn\u0027t consider that the underlying filesystem may have changed since the time lstat(2) was called in usb_mtp_object_alloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS.",
  "id": "UBUNTU-CVE-2018-16872",
  "modified": "2025-09-08T16:45:01Z",
  "published": "2018-12-13T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-16872"
    },
    {
      "type": "REPORT",
      "url": "https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg03135.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2018/12/13/11"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3923-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16872"
    }
  ],
  "related": [
    "USN-3923-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-16872"
  ]
}

ubuntu-cve-2018-19489

Vulnerability from osv_ubuntu

Published

2018-12-13 00:00

Modified

2025-09-08 16:45

Summary

Details

v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming.

Severity

4.7 (Medium)


                    
                      CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 (Medium)


                    
                      CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-19489	REPORT
	https://www.openwall.com/lists/oss-security/2018/…	REPORT
	https://lists.gnu.org/archive/html/qemu-devel/201…	REPORT
	https://ubuntu.com/security/notices/USN-3923-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-19489	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-common",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-keymaps",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-aarch64",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "2.0.0+dfsg-2ubuntu1.45"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@2.0.0+dfsg-2ubuntu1.45?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.0+dfsg-2ubuntu1.45"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.5.0+dfsg-3ubuntu5",
        "1.5.0+dfsg-3ubuntu6",
        "1.6.0+dfsg-2ubuntu1",
        "1.6.0+dfsg-2ubuntu2",
        "1.6.0+dfsg-2ubuntu3",
        "1.6.0+dfsg-2ubuntu4",
        "1.7.0+dfsg-2ubuntu1",
        "1.7.0+dfsg-2ubuntu2",
        "1.7.0+dfsg-2ubuntu3",
        "1.7.0+dfsg-2ubuntu4",
        "1.7.0+dfsg-2ubuntu5",
        "1.7.0+dfsg-2ubuntu7",
        "1.7.0+dfsg-2ubuntu8",
        "1.7.0+dfsg-2ubuntu9",
        "1.7.0+dfsg-3ubuntu1~ppa1",
        "1.7.0+dfsg-3ubuntu1",
        "1.7.0+dfsg-3ubuntu2",
        "1.7.0+dfsg-3ubuntu3",
        "1.7.0+dfsg-3ubuntu4",
        "1.7.0+dfsg-3ubuntu5",
        "1.7.0+dfsg-3ubuntu6",
        "1.7.0+dfsg-3ubuntu7",
        "2.0.0~rc1+dfsg-0ubuntu1",
        "2.0.0~rc1+dfsg-0ubuntu2",
        "2.0.0~rc1+dfsg-0ubuntu3",
        "2.0.0~rc1+dfsg-0ubuntu3.1",
        "2.0.0+dfsg-2ubuntu1",
        "2.0.0+dfsg-2ubuntu1.1",
        "2.0.0+dfsg-2ubuntu1.2",
        "2.0.0+dfsg-2ubuntu1.3",
        "2.0.0+dfsg-2ubuntu1.5",
        "2.0.0+dfsg-2ubuntu1.6",
        "2.0.0+dfsg-2ubuntu1.7",
        "2.0.0+dfsg-2ubuntu1.8",
        "2.0.0+dfsg-2ubuntu1.9",
        "2.0.0+dfsg-2ubuntu1.10",
        "2.0.0+dfsg-2ubuntu1.11",
        "2.0.0+dfsg-2ubuntu1.13",
        "2.0.0+dfsg-2ubuntu1.14",
        "2.0.0+dfsg-2ubuntu1.15",
        "2.0.0+dfsg-2ubuntu1.16",
        "2.0.0+dfsg-2ubuntu1.17",
        "2.0.0+dfsg-2ubuntu1.18",
        "2.0.0+dfsg-2ubuntu1.19",
        "2.0.0+dfsg-2ubuntu1.20",
        "2.0.0+dfsg-2ubuntu1.21",
        "2.0.0+dfsg-2ubuntu1.22",
        "2.0.0+dfsg-2ubuntu1.24",
        "2.0.0+dfsg-2ubuntu1.25",
        "2.0.0+dfsg-2ubuntu1.26",
        "2.0.0+dfsg-2ubuntu1.27",
        "2.0.0+dfsg-2ubuntu1.28",
        "2.0.0+dfsg-2ubuntu1.29",
        "2.0.0+dfsg-2ubuntu1.30",
        "2.0.0+dfsg-2ubuntu1.31",
        "2.0.0+dfsg-2ubuntu1.32",
        "2.0.0+dfsg-2ubuntu1.33",
        "2.0.0+dfsg-2ubuntu1.34",
        "2.0.0+dfsg-2ubuntu1.35",
        "2.0.0+dfsg-2ubuntu1.36",
        "2.0.0+dfsg-2ubuntu1.38",
        "2.0.0+dfsg-2ubuntu1.39",
        "2.0.0+dfsg-2ubuntu1.40",
        "2.0.0+dfsg-2ubuntu1.41",
        "2.0.0+dfsg-2ubuntu1.42",
        "2.0.0+dfsg-2ubuntu1.43",
        "2.0.0+dfsg-2ubuntu1.44"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-aarch64",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:2.5+dfsg-5ubuntu10.36"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:2.5+dfsg-5ubuntu10.36?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.5+dfsg-5ubuntu10.36"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.3+dfsg-5ubuntu9",
        "1:2.3+dfsg-5ubuntu10",
        "1:2.4+dfsg-4ubuntu1",
        "1:2.4+dfsg-4ubuntu2",
        "1:2.4+dfsg-4ubuntu3",
        "1:2.4+dfsg-5ubuntu3",
        "1:2.5+dfsg-1ubuntu2",
        "1:2.5+dfsg-1ubuntu3",
        "1:2.5+dfsg-1ubuntu4",
        "1:2.5+dfsg-1ubuntu5",
        "1:2.5+dfsg-5ubuntu1",
        "1:2.5+dfsg-5ubuntu2",
        "1:2.5+dfsg-5ubuntu4",
        "1:2.5+dfsg-5ubuntu6",
        "1:2.5+dfsg-5ubuntu7",
        "1:2.5+dfsg-5ubuntu10",
        "1:2.5+dfsg-5ubuntu10.1",
        "1:2.5+dfsg-5ubuntu10.2",
        "1:2.5+dfsg-5ubuntu10.3",
        "1:2.5+dfsg-5ubuntu10.4",
        "1:2.5+dfsg-5ubuntu10.5",
        "1:2.5+dfsg-5ubuntu10.6",
        "1:2.5+dfsg-5ubuntu10.7",
        "1:2.5+dfsg-5ubuntu10.8",
        "1:2.5+dfsg-5ubuntu10.9",
        "1:2.5+dfsg-5ubuntu10.10",
        "1:2.5+dfsg-5ubuntu10.11",
        "1:2.5+dfsg-5ubuntu10.13",
        "1:2.5+dfsg-5ubuntu10.14",
        "1:2.5+dfsg-5ubuntu10.15",
        "1:2.5+dfsg-5ubuntu10.16",
        "1:2.5+dfsg-5ubuntu10.20",
        "1:2.5+dfsg-5ubuntu10.21",
        "1:2.5+dfsg-5ubuntu10.22",
        "1:2.5+dfsg-5ubuntu10.24",
        "1:2.5+dfsg-5ubuntu10.25",
        "1:2.5+dfsg-5ubuntu10.26",
        "1:2.5+dfsg-5ubuntu10.28",
        "1:2.5+dfsg-5ubuntu10.29",
        "1:2.5+dfsg-5ubuntu10.30",
        "1:2.5+dfsg-5ubuntu10.31",
        "1:2.5+dfsg-5ubuntu10.32",
        "1:2.5+dfsg-5ubuntu10.33",
        "1:2.5+dfsg-5ubuntu10.34",
        "1:2.5+dfsg-5ubuntu10.35"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:2.11+dfsg-1ubuntu7.12?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.11+dfsg-1ubuntu7.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.10+dfsg-0ubuntu3",
        "1:2.10+dfsg-0ubuntu4",
        "1:2.10+dfsg-0ubuntu5",
        "1:2.11+dfsg-1ubuntu1",
        "1:2.11+dfsg-1ubuntu2",
        "1:2.11+dfsg-1ubuntu4",
        "1:2.11+dfsg-1ubuntu5",
        "1:2.11+dfsg-1ubuntu6",
        "1:2.11+dfsg-1ubuntu7",
        "1:2.11+dfsg-1ubuntu7.1",
        "1:2.11+dfsg-1ubuntu7.2",
        "1:2.11+dfsg-1ubuntu7.3",
        "1:2.11+dfsg-1ubuntu7.4",
        "1:2.11+dfsg-1ubuntu7.5",
        "1:2.11+dfsg-1ubuntu7.6",
        "1:2.11+dfsg-1ubuntu7.7",
        "1:2.11+dfsg-1ubuntu7.8",
        "1:2.11+dfsg-1ubuntu7.9",
        "1:2.11+dfsg-1ubuntu7.10"
      ]
    }
  ],
  "aliases": [],
  "details": "v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming.",
  "id": "UBUNTU-CVE-2018-19489",
  "modified": "2025-09-08T16:45:05Z",
  "published": "2018-12-13T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-19489"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2018/11/26/1"
    },
    {
      "type": "REPORT",
      "url": "https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg04489.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3923-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-19489"
    }
  ],
  "related": [
    "USN-3923-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-19489"
  ]
}

ubuntu-cve-2019-3812

Vulnerability from osv_ubuntu

Published

2019-02-19 00:00

Modified

2025-09-08 16:45

Summary

Details

QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host.

Severity

5.5 (Medium)


                    
                      CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.4 (Medium)


                    
                      CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2019-3812	REPORT
	https://ubuntu.com/security/notices/USN-3923-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2019-3812	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:2.11+dfsg-1ubuntu7.12"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:2.11+dfsg-1ubuntu7.12?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.11+dfsg-1ubuntu7.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.10+dfsg-0ubuntu3",
        "1:2.10+dfsg-0ubuntu4",
        "1:2.10+dfsg-0ubuntu5",
        "1:2.11+dfsg-1ubuntu1",
        "1:2.11+dfsg-1ubuntu2",
        "1:2.11+dfsg-1ubuntu4",
        "1:2.11+dfsg-1ubuntu5",
        "1:2.11+dfsg-1ubuntu6",
        "1:2.11+dfsg-1ubuntu7",
        "1:2.11+dfsg-1ubuntu7.1",
        "1:2.11+dfsg-1ubuntu7.2",
        "1:2.11+dfsg-1ubuntu7.3",
        "1:2.11+dfsg-1ubuntu7.4",
        "1:2.11+dfsg-1ubuntu7.5",
        "1:2.11+dfsg-1ubuntu7.6",
        "1:2.11+dfsg-1ubuntu7.7",
        "1:2.11+dfsg-1ubuntu7.8",
        "1:2.11+dfsg-1ubuntu7.9",
        "1:2.11+dfsg-1ubuntu7.10"
      ]
    }
  ],
  "aliases": [],
  "details": "QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host.",
  "id": "UBUNTU-CVE-2019-3812",
  "modified": "2025-09-08T16:45:13Z",
  "published": "2019-02-19T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-3812"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3923-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-3812"
    }
  ],
  "related": [
    "USN-3923-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2019-3812"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

usn-3923-1

Vulnerability from osv_ubuntu

ubuntu-cve-2018-16872

Vulnerability from osv_ubuntu

ubuntu-cve-2018-19489

Vulnerability from osv_ubuntu

ubuntu-cve-2019-3812

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature