CVE-2018-3630
Security update for ovmf
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none
- Record
CVE-2018-3630- Updated
- 2026-11-02
EUVDEUVD-2018-15484 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none
- Record
EUVD-2018-15484- Updated
- 2026-11-03
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none
- Record
CVE-2018-3630- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1083-1 No score
Security update for ovmf
This update for ovmf fixes the following issues:
Security issues fixed:
- CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun (bsc#1127820).
- CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet (bsc#1127821).
- CVE-2018-3630: Fixed a logic error in FV parsing which could allow a local attacker to bypass the chain of trust checks (bsc#1127822).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:1083-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11134-1 No score
ovmf-202105-3.4 on GA media
These are all security issues fixed in the ovmf-202105-3.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11134-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0579-1 No score
Security update for ovmf
This update for ovmf fixes the following issues:
Security issues fixed:
- CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun (bsc#1127820).
- CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet (bsc#1127821).
- CVE-2018-3630: Fixed a logic error in FV parsing which could allow a local attacker to bypass the chain of trust checks (bsc#1127822).
- Record
SUSE-SU-2019:0579-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0580-1 No score
Security update for ovmf
This update for ovmf fixes the following issues:
Security issues fixed:
- CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun (bsc#1127820).
- CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet (bsc#1127821).
- CVE-2018-3630: Fixed a logic error in FV parsing which could allow a local attacker to bypass the chain of trust checks (bsc#1127822).
- Record
SUSE-SU-2019:0580-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0581-1 No score
Security update for ovmf
This update for ovmf fixes the following issues:
Security issues fixed:
- CVE-2018-12180: Fixed a buffer overflow in BlockIo service, which could lead to memory read/write overrun (bsc#1127820).
- CVE-2018-12178: Fixed an improper DNS check upon receiving a new DNS packet (bsc#1127821).
- CVE-2018-3630: Fixed a logic error in FV parsing which could allow a local attacker to bypass the chain of trust checks (bsc#1127822).
- Record
SUSE-SU-2019:0581-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ovmfSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 3 CVEs |
before 2017+git1492060560.b6d11d7c46-4.20.1 | 2017+git1492060560.b6d11d7c46-4.20.1 |
ovmfSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 3 CVEs |
before 2017+git1492060560.b6d11d7c46-4.20.1 | 2017+git1492060560.b6d11d7c46-4.20.1 |
ovmfSUSE:Linux Enterprise Module for Server Applications 15 From an advisory covering 3 CVEs |
before 2017+git1510945757.b2662641d5-5.14.1 | 2017+git1510945757.b2662641d5-5.14.1 |
ovmfSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 3 CVEs |
before 2017+git1510945757.b2662641d5-3.8.3 | 2017+git1510945757.b2662641d5-3.8.3 |
ovmfSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 3 CVEs |
before 2017+git1510945757.b2662641d5-3.8.3 | 2017+git1510945757.b2662641d5-3.8.3 |
ovmfSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 3 CVEs |
before 2017+git1510945757.b2662641d5-3.8.3 | 2017+git1510945757.b2662641d5-3.8.3 |
ovmfopenSUSE:Leap 15.0 From an advisory covering 3 CVEs |
before 2017+git1510945757.b2662641d5-lp150.4.13.1 | 2017+git1510945757.b2662641d5-lp150.4.13.1 |
ovmfopenSUSE:Tumbleweed From an advisory covering 21 CVEs |
before 202105-3.4 | 202105-3.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-3630 has been rejected by its source and should not be treated as a live vulnerability, published March 11, 2019.
References
suse.com/support/update/announcement/2019/suse-su-20190579-1
bugzilla.suse.com/1127820
Show 22 moreShow less
lists.opensuse.org/archives/list/[email protected]/thread/RBHHJFWMTAGCQFDWWVONGJIFVT7IEDVF