hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.
CVSS Details
- CVSS 3.1 Base Score: 5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 30, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 30, 2020 |
| Debian | — | Upgrade qemu | Dec 1, 2020 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Feb 2, 2021 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Feb 8, 2021 | Nov 30, 2020 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade ivshmem-tools | Feb 9, 2021 | Sep 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2020 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-extraUpgrade qemu-block-rbdUpgrade qemu-testsuiteUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-langUpgrade qemu-toolsUpgrade qemu-block-curlUpgrade qemu-audio-sdlUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-s390Upgrade qemu-armUpgrade qemuUpgrade qemu-microvmUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade kvmUpgrade qemu-ui-sdlUpgrade qemu-linux-userUpgrade qemu-block-glusterUpgrade qemu-block-nfs | Apr 17, 2021 | Nov 30, 2020 |
| Ubuntu | — | Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-miscUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-common (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro) | Dec 1, 2020 | Nov 30, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub