hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 30, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 30, 2020 |
| Debian | — | Upgrade qemu | Dec 1, 2020 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Feb 2, 2021 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Feb 8, 2021 | Nov 30, 2020 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-system-x86-coreUpgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-system-x86 | Feb 9, 2021 | Sep 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2020 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-audio-ossUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-audio-paUpgrade qemu-ui-sdlUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-linux-userUpgrade kvmUpgrade qemu-block-glusterUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-ui-spice-appUpgrade qemu-ipxeUpgrade qemu-block-curlUpgrade qemu-langUpgrade qemu-vhost-user-gpuUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-extraUpgrade qemu-block-rbdUpgrade qemu-testsuiteUpgrade qemu-guest-agentUpgrade qemu-s390Upgrade qemu-block-sshUpgrade qemu-audio-sdlUpgrade qemu-ui-gtkUpgrade qemu-block-iscsi | Apr 17, 2021 | Nov 30, 2020 |
| Ubuntu | — | Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro) | Dec 1, 2020 | Nov 30, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub