In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.
CVSS Details
- CVSS 3.1 Base Score: 3.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 28, 2020 |
| Debian | — | Upgrade qemu | Jul 2, 2020 | May 28, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Nov 12, 2020 | May 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Nov 3, 2020 | May 28, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 28, 2020 |
| Suse | — | Upgrade qemu-vgabiosUpgrade qemu-s390xUpgrade qemu-x86Upgrade qemu-block-iscsiUpgrade qemu-audio-sdlUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade qemu-testsuiteUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-extraUpgrade qemu-seabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-kvmUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-vhost-user-gpuUpgrade kvmUpgrade qemu-ui-openglUpgrade qemu-audio-paUpgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-ui-sdlUpgrade qemu-block-glusterUpgrade qemu-skibootUpgrade qemu-armUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-sgabiosUpgrade qemu-linux-userUpgrade qemu-ipxeUpgrade qemu-block-nfsUpgrade qemu-hw-display-qxlUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-ossUpgrade qemu-chardev-spiceUpgrade qemu | Jul 29, 2020 | May 28, 2020 |
| Ubuntu | — | Upgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-armUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemuUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-arm (Ubuntu Pro) | Aug 20, 2020 | May 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub