PT-2023-4687 · Qemu+2 · Qemu+2

Yifan Lu · Published 2023-08-28 · Updated 2024-08-04 · CVE-2020-24165

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QEMU version 4.2.0

Description An issue was discovered in the TCG Accelerator component of QEMU, related to the use of memory after it has been freed. This issue allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note that this is disputed as a bug and not a valid security issue by multiple third parties.

Recommendations For QEMU version 4.2.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2023-05104

CVE-2020-24165

DLA-3604-1

OESA-2023-1654

OESA-2023-1655

USN-6567-1

USN-6567-2

Affected Products

Linuxmint

Qemu

Ubuntu

References · 80

• https://ubuntu.com/security/CVE-2023-40360 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40360 · Security Note
• https://bdu.fstec.ru/vul/2023-02140 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-13791 · Security Note
• https://osv.dev/vulnerability/OESA-2023-1655 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3638 · Security Note
• https://ubuntu.com/security/CVE-2023-3301 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6567-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-24165 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4135 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-24165 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-24165 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3354 · Security Note
• https://osv.dev/vulnerability/DLA-3604-1 · Vendor Advisory