UBUNTU-CVE-2018-25220

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2018-25220
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25220.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-25220
Upstream
  • CVE-2018-25220
Published
2026-03-28T12:16:00Z
Modified
2026-05-20T16:03:39.041099106Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwrite the instruction pointer and execute shell commands with application privileges.

References

Affected packages

Ubuntu:16.04:LTS
bochs

Package

Name
bochs
Purl
pkg:deb/ubuntu/bochs?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.6-2build1
2.6-5
2.6-5build1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bochs",
            "binary_version": "2.6-5build1"
        },
        {
            "binary_name": "bochs-sdl",
            "binary_version": "2.6-5build1"
        },
        {
            "binary_name": "bochs-term",
            "binary_version": "2.6-5build1"
        },
        {
            "binary_name": "bochs-wx",
            "binary_version": "2.6-5build1"
        },
        {
            "binary_name": "bochs-x",
            "binary_version": "2.6-5build1"
        },
        {
            "binary_name": "bochsbios",
            "binary_version": "2.6-5build1"
        },
        {
            "binary_name": "bximage",
            "binary_version": "2.6-5build1"
        },
        {
            "binary_name": "sb16ctrl-bochs",
            "binary_version": "2.6-5build1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25220.json"
Ubuntu:18.04:LTS
bochs

Package

Name
bochs
Purl
pkg:deb/ubuntu/bochs?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.6-5build1
2.6-5build2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bochs",
            "binary_version": "2.6-5build2"
        },
        {
            "binary_name": "bochs-sdl",
            "binary_version": "2.6-5build2"
        },
        {
            "binary_name": "bochs-term",
            "binary_version": "2.6-5build2"
        },
        {
            "binary_name": "bochs-wx",
            "binary_version": "2.6-5build2"
        },
        {
            "binary_name": "bochs-x",
            "binary_version": "2.6-5build2"
        },
        {
            "binary_name": "bochsbios",
            "binary_version": "2.6-5build2"
        },
        {
            "binary_name": "bximage",
            "binary_version": "2.6-5build2"
        },
        {
            "binary_name": "sb16ctrl-bochs",
            "binary_version": "2.6-5build2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25220.json"
Ubuntu:20.04:LTS
bochs

Package

Name
bochs
Purl
pkg:deb/ubuntu/bochs?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.6.9+dfsg-3build1
2.6.9+dfsg-4
2.6.9+dfsg-5
2.6.10+dfsg-2
2.6.11+dfsg-1
2.6.11+dfsg-1build1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bochs",
            "binary_version": "2.6.11+dfsg-1build1"
        },
        {
            "binary_name": "bochs-sdl",
            "binary_version": "2.6.11+dfsg-1build1"
        },
        {
            "binary_name": "bochs-term",
            "binary_version": "2.6.11+dfsg-1build1"
        },
        {
            "binary_name": "bochs-wx",
            "binary_version": "2.6.11+dfsg-1build1"
        },
        {
            "binary_name": "bochs-x",
            "binary_version": "2.6.11+dfsg-1build1"
        },
        {
            "binary_name": "bochsbios",
            "binary_version": "2.6.11+dfsg-1build1"
        },
        {
            "binary_name": "bximage",
            "binary_version": "2.6.11+dfsg-1build1"
        },
        {
            "binary_name": "sb16ctrl-bochs",
            "binary_version": "2.6.11+dfsg-1build1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25220.json"
Ubuntu:22.04:LTS
bochs

Package

Name
bochs
Purl
pkg:deb/ubuntu/bochs?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.6.11+dfsg-4
2.7+dfsg-2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bochs",
            "binary_version": "2.7+dfsg-2"
        },
        {
            "binary_name": "bochs-sdl",
            "binary_version": "2.7+dfsg-2"
        },
        {
            "binary_name": "bochs-term",
            "binary_version": "2.7+dfsg-2"
        },
        {
            "binary_name": "bochs-wx",
            "binary_version": "2.7+dfsg-2"
        },
        {
            "binary_name": "bochs-x",
            "binary_version": "2.7+dfsg-2"
        },
        {
            "binary_name": "bochsbios",
            "binary_version": "2.7+dfsg-2"
        },
        {
            "binary_name": "bximage",
            "binary_version": "2.7+dfsg-2"
        },
        {
            "binary_name": "sb16ctrl-bochs",
            "binary_version": "2.7+dfsg-2"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25220.json"
Ubuntu:24.04:LTS
bochs

Package

Name
bochs
Purl
pkg:deb/ubuntu/bochs?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.7+dfsg-4build1
2.7+dfsg-4build4
2.7+dfsg-4build5

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bochs",
            "binary_version": "2.7+dfsg-4build5"
        },
        {
            "binary_name": "bochs-sdl",
            "binary_version": "2.7+dfsg-4build5"
        },
        {
            "binary_name": "bochs-term",
            "binary_version": "2.7+dfsg-4build5"
        },
        {
            "binary_name": "bochs-wx",
            "binary_version": "2.7+dfsg-4build5"
        },
        {
            "binary_name": "bochs-x",
            "binary_version": "2.7+dfsg-4build5"
        },
        {
            "binary_name": "bochsbios",
            "binary_version": "2.7+dfsg-4build5"
        },
        {
            "binary_name": "bximage",
            "binary_version": "2.7+dfsg-4build5"
        },
        {
            "binary_name": "sb16ctrl-bochs",
            "binary_version": "2.7+dfsg-4build5"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25220.json"
Ubuntu:25.10
bochs

Package

Name
bochs
Purl
pkg:deb/ubuntu/bochs?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.8+dfsg-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bochs",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochs-sdl",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochs-term",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochs-wx",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochs-x",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochsbios",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bximage",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "sb16ctrl-bochs",
            "binary_version": "2.8+dfsg-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25220.json"
Ubuntu:26.04:LTS
bochs

Package

Name
bochs
Purl
pkg:deb/ubuntu/bochs?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.8+dfsg-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bochs",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochs-sdl",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochs-term",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochs-wx",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochs-x",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bochsbios",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "bximage",
            "binary_version": "2.8+dfsg-1"
        },
        {
            "binary_name": "sb16ctrl-bochs",
            "binary_version": "2.8+dfsg-1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25220.json"