Bug 1119991 (CVE-2018-20126) - VUL-1: CVE-2018-20126: kvm,qemu: memory leakage due to non free memory objects in qemu implementation can lead to DOS
Summary: VUL-1: CVE-2018-20126: kvm,qemu: memory leakage due to non free memory object...
Status: RESOLVED FIXED
Alias: CVE-2018-20126
Product: openSUSE Distribution
Classification: openSUSE
Component: Security (show other bugs)
Version: Leap 42.3
Hardware: Other Other
: P4 - Low : Minor (vote)
Target Milestone: ---
Assignee: Bruce Rogers
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/221371/
Whiteboard: CVSSv3.1:SUSE:CVE-2018-20126:3.8:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2018-12-19 16:56 UTC by Alexandros Toptsoglou
Modified: 2023-07-25 17:32 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alexandros Toptsoglou 2018-12-19 16:56:25 UTC
CVE-2018-20126

A memory leakage issue was found in QEMU's implementation of VMWare's 
paravirtual RDMA device. It could occur while creating CQ/QP ring objects in 
create_cq/qp() routines, as it did not free ring objects' memory in case of an 
error. A guest user/process could use this flaw to leak host memory resulting in DoS.

Upstream patch:
https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg02824.html

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20126
http://seclists.org/oss-sec/2018/q4/266
https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg02824.html
Comment 1 Bruce Rogers 2019-01-10 16:14:58 UTC
Fix included in qemu about to be checked in for openSUSE:Factory and SLE15-SP1. No other qemu's we deliver are affected.
Comment 4 Swamp Workflow Management 2019-11-13 00:00:32 UTC
SUSE-SU-2019:2955-1: An update that solves 6 vulnerabilities and has 8 fixes is now available.

Category: security (important)
Bug References: 1079730,1098403,1111025,1117665,1119991,1143794,1144087,1145379,1145427,1145436,1145774,1146873,1149811,1152506
CVE References: CVE-2018-12207,CVE-2018-20126,CVE-2019-11135,CVE-2019-12068,CVE-2019-14378,CVE-2019-15890
Sources used:
SUSE Linux Enterprise Module for Server Applications 15-SP1 (src):    qemu-3.1.1.1-9.6.2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (src):    qemu-3.1.1.1-9.6.2, qemu-linux-user-3.1.1.1-9.6.2
SUSE Linux Enterprise Module for Basesystem 15-SP1 (src):    qemu-3.1.1.1-9.6.2

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 5 Swamp Workflow Management 2019-11-13 01:09:52 UTC
SUSE-SU-2019:2956-1: An update that solves four vulnerabilities and has one errata is now available.

Category: security (important)
Bug References: 1119991,1146873,1152506,1153358,1155812
CVE References: CVE-2018-12207,CVE-2018-20126,CVE-2019-11135,CVE-2019-12068
Sources used:
SUSE Linux Enterprise Server 12-SP4 (src):    qemu-2.11.2-5.23.2
SUSE Linux Enterprise Desktop 12-SP4 (src):    qemu-2.11.2-5.23.2

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 6 Swamp Workflow Management 2019-11-13 01:40:49 UTC
SUSE-SU-2019:2954-1: An update that fixes four vulnerabilities is now available.

Category: security (important)
Bug References: 1119991,1146873,1152506,1155812
CVE References: CVE-2018-12207,CVE-2018-20126,CVE-2019-11135,CVE-2019-12068
Sources used:
SUSE Linux Enterprise Module for Server Applications 15 (src):    qemu-2.11.2-9.33.1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src):    qemu-2.11.2-9.33.1, qemu-linux-user-2.11.2-9.33.1
SUSE Linux Enterprise Module for Basesystem 15 (src):    qemu-2.11.2-9.33.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 7 Swamp Workflow Management 2019-11-14 11:15:34 UTC
openSUSE-SU-2019:2510-1: An update that solves 6 vulnerabilities and has 8 fixes is now available.

Category: security (important)
Bug References: 1079730,1098403,1111025,1117665,1119991,1143794,1144087,1145379,1145427,1145436,1145774,1146873,1149811,1152506
CVE References: CVE-2018-12207,CVE-2018-20126,CVE-2019-11135,CVE-2019-12068,CVE-2019-14378,CVE-2019-15890
Sources used:
openSUSE Leap 15.1 (src):    qemu-3.1.1.1-lp151.7.6.1, qemu-linux-user-3.1.1.1-lp151.7.6.1
Comment 8 Swamp Workflow Management 2019-11-14 14:13:28 UTC
openSUSE-SU-2019:2505-1: An update that fixes four vulnerabilities is now available.

Category: security (important)
Bug References: 1119991,1146873,1152506,1155812
CVE References: CVE-2018-12207,CVE-2018-20126,CVE-2019-11135,CVE-2019-12068
Sources used:
openSUSE Leap 15.0 (src):    qemu-2.11.2-lp150.7.28.1