CVE-2018-18849

In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.

• CWE-125

• http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2018/11/01/1Mailing List, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/05/msg00010.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQIBTGNRDQEXGAAYHE4JIWFAYFNHZ6QP/
• https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg06401.htmlPatch, Third Party Advisory
• https://seclists.org/bugtraq/2019/May/76
• https://security.netapp.com/advisory/ntap-20190411-0006/Third Party Advisory
• https://usn.ubuntu.com/3826-1/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4454
• http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2018/11/01/1Mailing List, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/05/msg00010.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQIBTGNRDQEXGAAYHE4JIWFAYFNHZ6QP/
• https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg06401.htmlPatch, Third Party Advisory
• https://seclists.org/bugtraq/2019/May/76
• https://security.netapp.com/advisory/ntap-20190411-0006/Third Party Advisory
• https://usn.ubuntu.com/3826-1/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4454

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1884IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0…4.8
• CVE-2018-18840XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndT…
• CVE-2018-18841XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndT…
• CVE-2018-18842CSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-B…
• CVE-2018-18843The Kubernetes integration in GitLab Enterprise Edition 11.x…
• CVE-2018-18845internal/advanced_comment_system/index.php and internal/adva…
• CVE-2018-1885IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.…5.3
• CVE-2018-18850In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1,…
• CVE-2018-18852Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command …
• CVE-2018-18853Lightbend Spray spray-json through 1.3.4 allows remote attac…
• CVE-2018-18854Lightbend Spray spray-json through 1.3.4 allows remote attac…
• CVE-2018-18856Multiple local privilege escalation vulnerabilities have bee…