QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Sep 25, 2020 |
| Debian | — | Upgrade qemu | Dec 1, 2020 | Sep 25, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Sep 25, 2020 |
| Suse | — | Upgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-testsuiteUpgrade qemu-ui-openglUpgrade qemu-block-iscsiUpgrade qemu-toolsUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-smartcardUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade qemu-vhost-user-gpuUpgrade qemu-ipxeUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-dmgUpgrade qemu-microvmUpgrade qemu-ui-sdlUpgrade qemu-kvmUpgrade qemu-armUpgrade qemu-vgabiosUpgrade qemu-linux-userUpgrade qemu-ui-cursesUpgrade qemu-block-nfsUpgrade qemu-extraUpgrade qemu-audio-sdlUpgrade qemu-chardev-baumUpgrade qemu-skibootUpgrade qemu-ivshmem-toolsUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu | Jun 4, 2021 | Sep 25, 2020 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86-xenUpgrade qemu-system-x86-microvmUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system | Dec 1, 2020 | Sep 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub