medium5.7
CVE-2018-19665
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
Impact
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qemu | Qemu | through 3.0.1 Version 3.1.0 |
| Opensuse | Leap | Version 42.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
- http://www.openwall.com/lists/oss-security/2018/11/29/1
- http://www.securityfocus.com/bid/106050
- https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg03570.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
- http://www.openwall.com/lists/oss-security/2018/11/29/1
- http://www.securityfocus.com/bid/106050
- https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg03570.html