hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 30, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 30, 2020 |
| Debian | — | Upgrade qemu | Dec 1, 2020 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Feb 2, 2021 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Feb 8, 2021 | Nov 30, 2020 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-block-rbd | Feb 9, 2021 | Sep 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2020 |
| Suse | — | Upgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-ksmUpgrade qemu-vhost-user-gpuUpgrade qemu-block-rbdUpgrade qemu-audio-sdlUpgrade qemu-testsuiteUpgrade qemu-extraUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-ui-sdlUpgrade qemu-audio-ossUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-block-nfsUpgrade qemuUpgrade qemu-microvmUpgrade qemu-linux-userUpgrade qemu-block-glusterUpgrade qemu-block-dmgUpgrade kvm | Apr 17, 2021 | Nov 30, 2020 |
| Ubuntu | — | Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-guest-agent (Ubuntu Pro) | Dec 1, 2020 | Nov 30, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub