id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
11224	qemu-3.1.0	Douglas R. Reno	Bruce Dubbs	"Multiple integer overflow issues were found and reported in various NIC emulations in QEMU. These integer overflow could occur while receiving packets and could lead to OOB stack buffer access, resulting in DoS scenario.

* CVE-2018-10839 Qemu: ne2000: integer overflow leads 
  to buffer overflow issue

Upstream fix:
  -> https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03273.html

* CVE-2018-17958 Qemu: rtl8139: integer overflow leads to buffer overflow

Upstream fix:
  -> https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03269.html

* CVE-2018-17962 Qemu: pcnet: integer overflow leads to buffer overflow

Upstream fix:
  -> https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03268.html

* CVE-2018-17963 Qemu: net: ignore packets with large size

Upstream fix:
  -> https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03267.html
"	enhancement	closed	normal	8.4	BOOK	SVN	medium	fixed