Lucene search
Veracode Vulnerability DatabaseVERACODE:26966HistorySep 21, 2020 - 6:27 a.m.
Denial Of Service (DoS)
2020-09-2106:27:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
0.0004 Low
EPSS
Percentile
5.1%
QEMU is vulnerable to denial of service. An integer overflow in the SM501 display driver implementation allows an attacker to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host. The vulnerability exists in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qemu:focal | eq | 1:4.2-3ubuntu6 | |
| qemu:bionic | eq | 1:2.11+dfsg-1ubuntu7 | |
| qemu:xenial | eq | 1:2.5+dfsg-5ubuntu10 |
Related
cbl_mariner
cbl_mariner
CVE-2020-12829 affecting package qemu-kvm 4.2.0-48
2020-11-30 19:31:04
osv
osv
CVE-2020-12829
2020-08-31 15:15:10
qemu - security update
2020-09-06 00:00:00
cvelist
cvelist
CVE-2020-12829
2020-08-31 14:41:14
ubuntucve
ubuntucve
CVE-2020-12829
2020-05-26 00:00:00
cve
cve
CVE-2020-12829
2020-08-31 15:15:10
redhatcve
redhatcve
CVE-2020-12829
2020-05-14 08:10:19
nvd
nvd
CVE-2020-12829
2020-08-31 15:15:10
prion
prion
Integer overflow
2020-08-31 15:15:00
debiancve
debiancve
CVE-2020-12829
2020-08-31 15:15:10
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.2.0 : qemu-kvm (EulerOS-SA-2021-1046)
2021-01-05 00:00:00
EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2021-1527)
2021-03-04 00:00:00
Debian DSA-4760-1 : qemu - security update
2020-09-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2021-1046)
2021-01-08 00:00:00
Debian: Security Advisory (DSA-4760-1)
2020-09-08 00:00:00
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2021-1527)
2021-03-05 00:00:00
debian
debian
[SECURITY] [DSA 4760-1] qemu security update
2020-09-06 18:00:48
ubuntu
ubuntu
QEMU vulnerabilities
2020-08-19 00:00:00
suse
suse
Security update for qemu (important)
2021-04-23 00:00:00
oraclelinux
oraclelinux
qemu security update
2021-02-08 00:00:00