CVE-2018-17958

Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.

• CWE-190
• CWE-190

• http://www.openwall.com/lists/oss-security/2018/10/08/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/105556Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2019:2425Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:2553Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/01/msg00023.htmlMailing List, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03269.htmlMailing List, Patch, Third Party Advisory
• https://seclists.org/bugtraq/2019/May/76Mailing List, Third Party Advisory
• https://usn.ubuntu.com/3826-1/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4454Third Party Advisory
• http://www.openwall.com/lists/oss-security/2018/10/08/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/105556Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2019:2425Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:2553Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/01/msg00023.htmlMailing List, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03269.htmlMailing List, Patch, Third Party Advisory
• https://seclists.org/bugtraq/2019/May/76Mailing List, Third Party Advisory
• https://usn.ubuntu.com/3826-1/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4454Third Party Advisory

Published

Oct 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17952Cross site scripting vulnerability in eDirectory prior to 9.…
• CVE-2018-17953A incorrect variable in a SUSE specific patch for pam_access…7.5
• CVE-2018-17954An Improper Privilege Management in crowbar of SUSE OpenStac…7.8
• CVE-2018-17955In yast2-multipath before version 4.1.1 a static temporary f…2.2
• CVE-2018-17956In yast2-samba-provision up to and including version 1.0.1 t…7.8
• CVE-2018-17957The YaST2 RMT module for configuring the SUSE Repository Mir…3.4
• CVE-2018-1796IBM Informix Dynamic Server Enterprise Edition 12.1 could al…7.8
• CVE-2018-17960CKEditor 4.x before 4.11.0 allows user-assisted XSS involvin…
• CVE-2018-17961Artifex Ghostscript 9.25 and earlier allows attackers to byp…
• CVE-2018-17962Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.…
• CVE-2018-17963qemu_deliver_packet_iov in net/net.c in Qemu accepts packet …9.8
• CVE-2018-17964Aryanic HighPortal 12.5 has XSS via an Add Tags action.