PT-2020-5613 · Qemu+4 · Qemu+4
Published
2020-05-02
·
Updated
2021-07-21
·
CVE-2020-24352
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
QEMU versions through 5.1.0
Description
The issue is related to an out-of-bounds memory access in the ATI VGA device implementation of the QEMU emulator. This occurs in the
ati 2d blt() routine in hw/display/ati 2d.c while handling MMIO write operations through the ati mm write() callback. A malicious guest could exploit this to crash the QEMU process on the host, resulting in a denial of service.Recommendations
For QEMU versions through 5.1.0, update to a version that contains a fix for this issue to prevent potential denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Out of bounds Read
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Qemu
Suse