The pnvlpcdoeccb function in hw/ppc/pnvlpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerNV memory.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"last_affected": "18.04"
},
{
"last_affected": "18.10"
}
],
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"source": "CPE_STRING"
},
{
"extracted_events": [
{
"last_affected": "42.3"
}
],
"cpes": [
"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"source": "CPE_STRING"
}
]
}