CVE-2018-15746

EUVD-2018-7615
qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
qemuqemu
𝑥
≤ 3.0.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
qemu
bookworm
1:7.2+dfsg-7+deb12u7
fixed
bullseye
1:5.2+dfsg-11+deb11u3
fixed
bullseye (security)
1:5.2+dfsg-11+deb11u2
fixed
jessie
ignored
sid
1:9.1.1+ds-2
fixed
stretch
ignored
trixie
1:9.1.1+ds-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qemu
bionic
Fixed 1:2.11+dfsg-1ubuntu7.6
released
cosmic
Fixed 1:2.12+dfsg-3ubuntu5
released
trusty
ignored
xenial
ignored
qemu-kvm
bionic
dne
cosmic
dne
trusty
dne
xenial
dne
References
http://www.openwall.com/lists/oss-security/2018/08/28/6
https://access.redhat.com/errata/RHSA-2019:2425
https://lists.gnu.org/archive/html/qemu-devel/2018-08/msg04892.html
http://www.openwall.com/lists/oss-security/2018/08/28/6
https://access.redhat.com/errata/RHSA-2019:2425
https://lists.gnu.org/archive/html/qemu-devel/2018-08/msg04892.html