QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Sep 25, 2020 |
| Debian | — | Upgrade qemu | Dec 1, 2020 | Sep 25, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Sep 25, 2020 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-s390xUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-testsuiteUpgrade qemu-vhost-user-gpuUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ipxeUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-block-glusterUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-hw-usb-smartcardUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-audio-sdlUpgrade qemu-ivshmem-toolsUpgrade qemu-vgabiosUpgrade qemu-linux-userUpgrade qemu-sgabiosUpgrade qemu-s390Upgrade qemu-seabiosUpgrade qemu-armUpgrade qemu-extraUpgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-ui-sdlUpgrade qemu-audio-ossUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-nfsUpgrade qemu-microvmUpgrade qemu-skiboot | Jun 4, 2021 | Sep 25, 2020 |
| Ubuntu | — | Upgrade qemu-system-x86-xenUpgrade qemu-system-ppcUpgrade qemu-system-x86-microvmUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system | Dec 1, 2020 | Sep 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub