[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2018-17962":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":79,"aliases":89,"duplicate_of":9,"upstream":90,"downstream":91,"duplicates":130,"related":131,"reserved_at":9,"published_at":145,"modified_at":146,"state":147,"summary":148,"references_raw":156,"kevs":201,"epss":202,"epss_history":205,"metrics":472,"affected":482},"CVE-2018-17962","Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.",null,[11,68],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-119","Improper Restriction of Operations within the Bounds of a Memory Buffer","The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","weakness","Stable","Class","High",[20,24,28,32,36,40,44,48,52,56,60,64],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-100","Overflow Buffers",[],{"id":29,"name":30,"techniques":31},"CAPEC-123","Buffer Manipulation",[],{"id":33,"name":34,"techniques":35},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":37,"name":38,"techniques":39},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":41,"name":42,"techniques":43},"CAPEC-42","MIME Conversion",[],{"id":45,"name":46,"techniques":47},"CAPEC-44","Overflow Binary Resource File",[],{"id":49,"name":50,"techniques":51},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":53,"name":54,"techniques":55},"CAPEC-46","Overflow Variables and Tags",[],{"id":57,"name":58,"techniques":59},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":61,"name":62,"techniques":63},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":65,"name":66,"techniques":67},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],{"_key":69,"id":69,"name":70,"description":71,"type":15,"status":16,"abstraction":72,"likelihood_of_exploit":73,"capec":74},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","Base","Medium",[75],{"id":76,"name":77,"techniques":78},"CAPEC-92","Forced Integer Overflow",[],[80],{"_key":81,"name":82,"source":83,"url":84,"maturity":85,"reliability_score":86,"verified":87,"type":9,"platforms":88,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_534E944AE1B56A81","Exploit Reference (lists.gnu.org)","reference","https://lists.gnu.org/archive/html/qemu-devel/2018-09/msg03268.html","unknown",0.2,false,[],[],[],[92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128],{"_key":93},"SUSE-SU-2018:3912-1",{"_key":95},"SUSE-SU-2018:3973-2",{"_key":97},"SUSE-SU-2018:3927-1",{"_key":99},"SUSE-SU-2018:3973-1",{"_key":101},"SUSE-SU-2018:3975-1",{"_key":103},"SUSE-SU-2018:3987-1",{"_key":105},"SUSE-SU-2018:4129-1",{"_key":107},"SUSE-SU-2018:4185-1",{"_key":109},"SUSE-SU-2018:4237-1",{"_key":111},"SUSE-SU-2019:0825-1",{"_key":113},"SUSE-SU-2019:0827-1",{"_key":115},"SUSE-SU-2019:13921-1",{"_key":117},"SUSE-SU-2019:14011-1",{"_key":119},"UBUNTU-CVE-2018-17962",{"_key":121},"RHSA-2019:2892",{"_key":123},"DLA-1599-1",{"_key":125},"DSA-4338-1",{"_key":127},"DEBIAN-CVE-2018-17962",{"_key":129},"USN-3826-1",[],[132,133,134,135,136,137,138,139,140,141,142,143,144],{"_key":93},{"_key":95},{"_key":97},{"_key":99},{"_key":101},{"_key":103},{"_key":105},{"_key":107},{"_key":109},{"_key":111},{"_key":113},{"_key":115},{"_key":117},"2018-10-09T22:00:00.000Z","2024-08-05T11:01:14.671Z","Modified",{"cisa_kev":87,"cisa_ransomware":87,"cisa_vendor":9,"epss_severity":149,"epss_score":150,"severity":151,"severity_score":152,"severity_version":153,"severity_source":154,"severity_vector":155,"severity_status":147},"low",0.00264,"high",7.5,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[157,165,171,176,180,184,189,193,197],{"url":158,"sources":159,"tags":161},"http://www.openwall.com/lists/oss-security/2018/10/08/1",[160,154],"cve.org",[162,163,164],"Mailing List","X Refsource MLIST","Third Party Advisory",{"url":166,"sources":167,"tags":168},"https://www.debian.org/security/2018/dsa-4338",[160,154],[169,170,164],"Vendor Advisory","X Refsource DEBIAN",{"url":172,"sources":173,"tags":174},"https://usn.ubuntu.com/3826-1/",[160,154],[169,175,164],"X Refsource UBUNTU",{"url":84,"sources":177,"tags":178},[160,154],[162,163,179,164],"Exploit",{"url":181,"sources":182,"tags":183},"https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html",[160,154],[162,163,164],{"url":185,"sources":186,"tags":187},"https://access.redhat.com/errata/RHSA-2019:2892",[160,154],[169,188],"X Refsource REDHAT",{"url":190,"sources":191,"tags":192},"https://access.redhat.com/security/cve/cve-2018-17962",[154],[164],{"url":194,"sources":195,"tags":196},"https://linux.oracle.com/cve/CVE-2018-17962.html",[154],[164],{"url":198,"sources":199,"tags":200},"https://www.suse.com/security/cve/CVE-2018-17962/",[154],[164],[],{"date":203,"score":150,"percentile":204},"2026-06-04",0.50088,[206,210,213,216,218,221,224,227,230,233,236,239,241,244,246,250,253,256,259,262,265,268,270,273,276,279,282,285,288,292,295,298,301,304,307,310,313,316,319,322,325,327,330,333,336,339,342,345,348,351,354,357,360,363,367,369,372,375,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,435,438,440,443,446,449,452,455,458,461,464,467,469],{"date":207,"score":208,"percentile":209},"2025-11-04",0.00323,0.54822,{"date":211,"score":208,"percentile":212},"2025-11-05",0.54786,{"date":214,"score":208,"percentile":215},"2025-11-06",0.548,{"date":217,"score":208,"percentile":209},"2025-11-07",{"date":219,"score":208,"percentile":220},"2025-11-08",0.54823,{"date":222,"score":208,"percentile":223},"2025-11-09",0.54818,{"date":225,"score":208,"percentile":226},"2025-11-10",0.54794,{"date":228,"score":208,"percentile":229},"2025-11-11",0.54808,{"date":231,"score":208,"percentile":232},"2025-11-12",0.54832,{"date":234,"score":208,"percentile":235},"2025-11-13",0.54841,{"date":237,"score":208,"percentile":238},"2025-11-14",0.54839,{"date":240,"score":208,"percentile":232},"2025-11-15",{"date":242,"score":208,"percentile":243},"2025-11-16",0.54813,{"date":245,"score":208,"percentile":215},"2025-11-17",{"date":247,"score":248,"percentile":249},"2025-11-18",0.01186,0.76992,{"date":251,"score":248,"percentile":252},"2025-11-19",0.76999,{"date":254,"score":248,"percentile":255},"2025-11-20",0.77008,{"date":257,"score":208,"percentile":258},"2025-11-21",0.54812,{"date":260,"score":208,"percentile":261},"2025-11-22",0.54804,{"date":263,"score":208,"percentile":264},"2025-11-23",0.54772,{"date":266,"score":208,"percentile":267},"2025-11-24",0.54767,{"date":269,"score":208,"percentile":264},"2025-11-25",{"date":271,"score":208,"percentile":272},"2025-11-26",0.54776,{"date":274,"score":208,"percentile":275},"2025-11-27",0.54779,{"date":277,"score":208,"percentile":278},"2025-11-28",0.54749,{"date":280,"score":208,"percentile":281},"2025-11-29",0.54733,{"date":283,"score":208,"percentile":284},"2025-11-30",0.54726,{"date":286,"score":208,"percentile":287},"2025-12-01",0.54878,{"date":289,"score":290,"percentile":291},"2025-12-02",0.00753,0.72508,{"date":293,"score":290,"percentile":294},"2025-12-03",0.72507,{"date":296,"score":290,"percentile":297},"2025-12-04",0.72379,{"date":299,"score":290,"percentile":300},"2025-12-05",0.72389,{"date":302,"score":290,"percentile":303},"2025-12-06",0.7239,{"date":305,"score":290,"percentile":306},"2025-12-07",0.72395,{"date":308,"score":290,"percentile":309},"2025-12-08",0.72397,{"date":311,"score":290,"percentile":312},"2025-12-09",0.72426,{"date":314,"score":290,"percentile":315},"2025-12-10",0.72459,{"date":317,"score":290,"percentile":318},"2025-12-11",0.72479,{"date":320,"score":290,"percentile":321},"2025-12-12",0.725,{"date":323,"score":290,"percentile":324},"2025-12-13",0.72513,{"date":326,"score":290,"percentile":324},"2025-12-14",{"date":328,"score":290,"percentile":329},"2025-12-15",0.72515,{"date":331,"score":290,"percentile":332},"2025-12-16",0.72532,{"date":334,"score":290,"percentile":335},"2025-12-17",0.72547,{"date":337,"score":290,"percentile":338},"2025-12-18",0.72571,{"date":340,"score":290,"percentile":341},"2025-12-19",0.72601,{"date":343,"score":290,"percentile":344},"2025-12-20",0.72602,{"date":346,"score":290,"percentile":347},"2025-12-21",0.72596,{"date":349,"score":290,"percentile":350},"2025-12-22",0.72592,{"date":352,"score":290,"percentile":353},"2025-12-23",0.72585,{"date":355,"score":290,"percentile":356},"2025-12-24",0.72595,{"date":358,"score":290,"percentile":359},"2025-12-25",0.72621,{"date":361,"score":290,"percentile":362},"2025-12-26",0.72622,{"date":364,"score":365,"percentile":366},"2025-12-27",0.00859,0.74502,{"date":368,"score":290,"percentile":347},"2025-12-28",{"date":370,"score":290,"percentile":371},"2025-12-29",0.72593,{"date":373,"score":290,"percentile":374},"2025-12-30",0.72606,{"date":376,"score":290,"percentile":377},"2025-12-31",0.72636,{"date":379,"score":290,"percentile":380},"2026-01-01",0.72779,{"date":382,"score":290,"percentile":383},"2026-01-02",0.72775,{"date":385,"score":290,"percentile":386},"2026-01-03",0.72774,{"date":388,"score":290,"percentile":389},"2026-01-04",0.72639,{"date":391,"score":290,"percentile":392},"2026-01-05",0.72633,{"date":394,"score":150,"percentile":395},"2026-01-06",0.49678,{"date":397,"score":150,"percentile":398},"2026-01-07",0.4969,{"date":400,"score":150,"percentile":401},"2026-01-08",0.49715,{"date":403,"score":150,"percentile":404},"2026-01-09",0.49691,{"date":406,"score":150,"percentile":407},"2026-01-10",0.49687,{"date":409,"score":150,"percentile":410},"2026-01-11",0.49668,{"date":412,"score":150,"percentile":413},"2026-01-12",0.49625,{"date":415,"score":150,"percentile":416},"2026-01-13",0.49602,{"date":418,"score":150,"percentile":419},"2026-01-14",0.49651,{"date":421,"score":150,"percentile":422},"2026-01-15",0.49654,{"date":424,"score":150,"percentile":425},"2026-01-16",0.49674,{"date":427,"score":150,"percentile":428},"2026-01-17",0.49649,{"date":430,"score":150,"percentile":431},"2026-01-18",0.49622,{"date":433,"score":150,"percentile":434},"2026-01-19",0.496,{"date":436,"score":150,"percentile":437},"2026-01-20",0.49604,{"date":439,"score":150,"percentile":437},"2026-01-21",{"date":441,"score":150,"percentile":442},"2026-01-22",0.49609,{"date":444,"score":150,"percentile":445},"2026-01-23",0.49657,{"date":447,"score":150,"percentile":448},"2026-01-24",0.49664,{"date":450,"score":150,"percentile":451},"2026-01-25",0.49616,{"date":453,"score":150,"percentile":454},"2026-01-26",0.49589,{"date":456,"score":150,"percentile":457},"2026-01-27",0.49595,{"date":459,"score":150,"percentile":460},"2026-01-28",0.49608,{"date":462,"score":150,"percentile":463},"2026-01-29",0.49603,{"date":465,"score":150,"percentile":466},"2026-01-30",0.4961,{"date":468,"score":150,"percentile":451},"2026-01-31",{"date":470,"score":150,"percentile":471},"2026-02-01",0.49755,[473],{"source":154,"cvss_v2_0":474,"cvss_v3_0":479,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":475,"baseSeverity":9,"vectorString":476,"impactScore":477,"exploitabilityScore":478},5,"AV:N/AC:L/Au:N/C:N/I:N/A:P",2.9,10,{"baseScore":152,"baseSeverity":480,"vectorString":155,"impactScore":481,"exploitabilityScore":478},"HIGH",6,[483,498,507,513,523,528],{"ecosystem":9,"name":484,"vendor":485,"product":486,"cpe_part":487,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":488},"ubuntu linux","canonical","ubuntu_linux","o",[489,492,494,496],{"version":490,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"14.04","cpe",{"version":493,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"16.04",{"version":495,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"18.04",{"version":497,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"18.10",{"ecosystem":9,"name":499,"vendor":500,"product":501,"cpe_part":487,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":502},"debian linux","debian","debian_linux",[503,505],{"version":504,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0",{"version":506,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0",{"ecosystem":9,"name":508,"vendor":509,"product":508,"cpe_part":487,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":510},"linux","oracle",[511],{"version":512,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7:0",{"ecosystem":9,"name":514,"vendor":514,"product":514,"cpe_part":515,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":516},"qemu","a",[517,519,521],{"version":518,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.1.0",{"version":520,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.8.0",{"version":522,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.12.0",{"ecosystem":9,"name":508,"vendor":524,"product":508,"cpe_part":487,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":525},"redhat",[526],{"version":527,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0",{"ecosystem":9,"name":529,"vendor":530,"product":531,"cpe_part":487,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":532},"linux enterprise server","suse","linux_enterprise_server",[533,535,537,539],{"version":534,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11:sp3",{"version":536,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11:sp4",{"version":538,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"12",{"version":540,"is_range":87,"range_type":491,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"15"]