QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Sep 25, 2020 |
| Debian | — | Upgrade qemu | Dec 1, 2020 | Sep 25, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Sep 25, 2020 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-skibootUpgrade qemu-sgabiosUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-block-dmgUpgrade qemu-chardev-baumUpgrade qemu-audio-sdlUpgrade qemu-s390Upgrade qemu-block-nfsUpgrade qemu-microvmUpgrade qemu-ivshmem-toolsUpgrade qemu-seabiosUpgrade qemu-linux-userUpgrade qemu-extraUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-ui-sdlUpgrade qemu-vhost-user-gpuUpgrade qemu-chardev-spiceUpgrade qemu-ppcUpgrade qemu-block-iscsiUpgrade qemu-block-glusterUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-qxlUpgrade qemu-block-sshUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-ui-spice-coreUpgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-testsuiteUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-tools | Jun 4, 2021 | Sep 25, 2020 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xen | Dec 1, 2020 | Sep 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub