PT-2020-6491 · Qemu+9 · Qemu+9

Alexander Bulekov + 1 · Published 2020-12-08 · Updated 2024-06-15 · CVE-2020-27821

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 5.2.0

Description A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service.

Recommendations For QEMU versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the memory management API to minimize the risk of exploitation.

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2021:1762

ALT-PU-2020-3527

ALT-PU-2021-1880

ALT-PU-2021-1964

BDU:2021-05312

CESA-2021_1762

CVE-2020-27821

DLA-3099-1

OESA-2021-1012

OPENSUSE-SU-2021:0600-1

OPENSUSE-SU-2021:1942-1

OPENSUSE-SU-2021_0600-1

OPENSUSE-SU-2021_1942-1

OPENSUSE-SU-2024:11287-1

RHSA-2021:1762

RHSA-2021_1762

RLSA-2021:1762

SUSE-SU-2021:1242-1

SUSE-SU-2021:1243-1

SUSE-SU-2021:1245-1

SUSE-SU-2021:1942-1

USN-4725-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Qemu

Red Hat

Rocky Linux

Suse

Ubuntu

References · 288

• https://osv.dev/vulnerability/openSUSE-SU-2021:1942-1 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1902651 · Patch
• https://ubuntu.com/security/CVE-2020-27821 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-27821 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2021-1762.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3099-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0600-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:1762 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15859 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1942-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-1762.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9285.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1245-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20181 · Vendor Advisory