Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-15863
HistoryJul 28, 2020 - 4:15 p.m.

CVE-2020-15863

2020-07-2816:15:12
CWE-787
[email protected]
web.nvd.nist.gov
9
qemu
buffer overflow
denial of service
privileged code execution

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

31.9%

JSON

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

Affected configurations

Nvd
Node
qemuqemuRange≤5.0.0
OR
qemuqemuMatch5.1.0rc0
Node
debiandebian_linuxMatch10.0
Node
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch20.04lts
VendorProductVersionCPE
qemuqemu*cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
qemuqemu5.1.0cpe:2.3:a:qemu:qemu:5.1.0:rc0:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
canonicalubuntu_linux16.04cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
canonicalubuntu_linux18.04cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
canonicalubuntu_linux20.04cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Related

cvelist 1
osv 3
cve 1
ubuntucve 1
redhatcve 1
cbl_mariner 1
prion 1
veracode 1
alpinelinux 1
debiancve 1
nessus 23
openvas 19
debian 2
suse 1
f5 1
ubuntu 1
gentoo 1
oraclelinux 1
cvelist
cvelist
CVE-2020-15863
2020-07-28 15:40:29
osv
osv
CVE-2020-15863
2020-07-28 16:15:12
qemu - security update
2020-09-06 00:00:00
qemu - security update
2020-07-25 00:00:00
cve
cve
CVE-2020-15863
2020-07-28 16:15:12
ubuntucve
ubuntucve
CVE-2020-15863
2020-07-28 00:00:00
redhatcve
redhatcve
CVE-2020-15863
2020-07-22 08:39:14
cbl_mariner
cbl_mariner
CVE-2020-15863 affecting package qemu-kvm 4.2.0-48
2020-11-05 04:21:31
prion
prion
Buffer overflow
2020-07-28 16:15:00
veracode
veracode
Buffer Overflow
2020-09-21 06:39:14
alpinelinux
alpinelinux
CVE-2020-15863
2020-07-28 16:15:12
debiancve
debiancve
CVE-2020-15863
2020-07-28 16:15:12
nessus
nessus
openSUSE Security Update : qemu (openSUSE-2020-1664)
2020-10-13 00:00:00
Debian DSA-4760-1 : qemu - security update
2020-09-08 00:00:00
SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2020:2877-1)
2020-12-09 00:00:00
openvas
openvas
openSUSE: Security Advisory for qemu (openSUSE-SU-2020:1664-1)
2020-10-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2877-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2743-1)
2021-04-19 00:00:00
debian
debian
[SECURITY] [DSA 4760-1] qemu security update
2020-09-06 18:00:48
[SECURITY] [DLA 2288-1] qemu security update
2020-07-26 11:51:28
suse
suse
Security update for qemu (important)
2020-10-13 00:00:00
f5
f5
K69488451 : Multiple QEMU vulnerabilities CVE-2020-13791, CVE-2020-13800, CVE-2020-15469, CVE-2020-15859, and CVE-2020-15863
2020-08-03 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2020-08-19 00:00:00
gentoo
gentoo
QEMU: Multiple Vulnerabilities
2022-08-14 00:00:00
oraclelinux
oraclelinux
qemu security update
2021-02-08 00:00:00

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

31.9%

JSON
Related for NVD:CVE-2020-15863
cvelist1osv3cve1ubuntucve1redhatcve1cbl_mariner1prion1veracode1alpinelinux1debiancve1nessus23openvas19debian2suse1f51ubuntu1gentoo1oraclelinux1