CVE-2018-15746

qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
VendorProductVersion
qemuqemu
𝑥
≤ 3.0.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
qemu
bullseye
1:5.2+dfsg-11+deb11u3
fixed
stretch
ignored
jessie
ignored
bullseye (security)
1:5.2+dfsg-11+deb11u2
fixed
bookworm
1:7.2+dfsg-7+deb12u7
fixed
sid
1:9.1.1+ds-2
fixed
trixie
1:9.1.1+ds-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qemu
cosmic
Fixed 1:2.12+dfsg-3ubuntu5
released
bionic
Fixed 1:2.11+dfsg-1ubuntu7.6
released
xenial
ignored
trusty
ignored
qemu-kvm
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
References
http://www.openwall.com/lists/oss-security/2018/08/28/6
https://access.redhat.com/errata/RHSA-2019:2425
https://lists.gnu.org/archive/html/qemu-devel/2018-08/msg04892.html
http://www.openwall.com/lists/oss-security/2018/08/28/6
https://access.redhat.com/errata/RHSA-2019:2425
https://lists.gnu.org/archive/html/qemu-devel/2018-08/msg04892.html