hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 30, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 30, 2020 |
| Debian | — | Upgrade qemu | Dec 1, 2020 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Feb 2, 2021 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Feb 8, 2021 | Nov 30, 2020 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-kvmUpgrade qemuUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64Upgrade qemu-block-rbdUpgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-img | Feb 9, 2021 | Sep 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2020 |
| Suse | — | Upgrade qemu-s390Upgrade qemu-extraUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-testsuiteUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-vhost-user-gpuUpgrade qemu-toolsUpgrade qemu-block-curlUpgrade qemu-langUpgrade qemu-audio-sdlUpgrade qemu-linux-userUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-ui-sdlUpgrade qemu-block-glusterUpgrade kvmUpgrade qemu-vgabiosUpgrade qemu-block-nfsUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-block-dmgUpgrade qemu-microvmUpgrade qemu-kvm | Apr 17, 2021 | Nov 30, 2020 |
| Ubuntu | — | Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-x86-microvmUpgrade qemu-system-arm | Dec 1, 2020 | Nov 30, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub