Name: CVE-2018-20126: Missing Release of Resource after Effective Lifetime
Creator: Rapid7
Published: 2018-12-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-20126, CWE-772, CVSS 5.5, EPSS 0.0049

hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade qemu	Jul 30, 2024	Dec 20, 2018
Oracle_linux	—	Upgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-block-iscsi	May 15, 2019	Dec 11, 2018
Suse	—	Upgrade qemu-skibootUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-dmgUpgrade qemu-langUpgrade qemu-ui-sdlUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade qemu-ui-spice-appUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-glusterUpgrade qemu-ui-openglUpgrade qemu-seabiosUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-block-nfsUpgrade qemu-block-sshUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemu-audio-sdlUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-extraUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-x86Upgrade qemu-guest-agentUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-redirectUpgrade qemu-linux-userUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-sgabios	Nov 13, 2019	Dec 20, 2018
Ubuntu	—	Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-guiUpgrade qemu-system-dataUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-s390x	Apr 3, 2019	Dec 20, 2018

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence