CVE-2018-17958 Integer overflow in n/a

High 7.5 Published 9 Oct 2018 Updated 28 Apr 2026

An integer overflow in QEMU's RTL8139 network driver allows attackers to cause buffer overflows, potentially leading to code execution or denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2018-17958?

CVE-2018-17958 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 9 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.

Weakness: CWE-190

Which versions are affected by CVE-2018-17958?

It affects 5 products.

Products include Canonical Ubuntu Linux, Debian Debian Linux, Qemu Qemu, Redhat Virtualization, Redhat Virtualization Manager.

How do I fix CVE-2018-17958?

Apply the vendor's patch.

Is CVE-2018-17958 being exploited?

There is no known exploitation of CVE-2018-17958 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2018-17958, GHSA-r358-8j8x-6jhw, UBUNTU-CVE-2018-17958.