PT-2020-6469 · Qemu+3 · Qemu+3

Published 2020-04-13 · Updated 2024-06-15 · CVE-2020-10702

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QEMU versions 4.0 through 5.0.0

Description A flaw was found in the implementation of the Pointer Authentication (PAuth) support for ARM. The issue is caused by a general failure of the signature generation process, resulting in every PAuth-enforced pointer being signed with the same signature. This allows a local attacker to obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU. The vulnerability may also allow an attacker to access confidential data.

Recommendations For QEMU versions 4.0 through 5.0.0, update to version 5.0.0 or later to resolve the issue. As a temporary workaround, consider disabling the PAuth support until a patch is available. Restrict access to sensitive data and programs running on QEMU to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-325

Related Identifiers

ALT-PU-2020-1912

ALT-PU-2021-1880

ALT-PU-2021-1964

BDU:2021-05173

CVE-2020-10702

OPENSUSE-SU-2024:11287-1

USN-4372-1

Affected Products

Alt Linux

Linuxmint

Qemu

Ubuntu

References · 158

• https://linux.oracle.com/errata/ELSA-2021-9034.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-20382 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-10702 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11869 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10702 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05173 · Security Note
• https://ubuntu.com/security/notices/USN-4372-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10702 · Security Note
• https://osv.dev/vulnerability/USN-4372-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15034 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11287-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-10702 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-10702 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-1983 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-10702 · Vendor Advisory