QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Sep 25, 2020 |
| Debian | — | Upgrade qemu | Dec 1, 2020 | Sep 25, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Sep 25, 2020 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-block-glusterUpgrade qemu-ui-openglUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-vhost-user-gpuUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-testsuiteUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade qemu-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemuUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-gtkUpgrade qemu-armUpgrade qemu-s390Upgrade qemu-extraUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-sdlUpgrade qemu-block-dmgUpgrade qemu-microvmUpgrade qemu-block-nfsUpgrade qemu-sgabiosUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-ivshmem-toolsUpgrade qemu-vgabiosUpgrade qemu-ui-sdlUpgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-linux-userUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu | Jun 4, 2021 | Sep 25, 2020 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-x86-microvmUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-x86-xen | Dec 1, 2020 | Sep 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub