Lucene search
Veracode Vulnerability DatabaseVERACODE:28398HistoryDec 06, 2020 - 4:23 a.m.
Denial Of Service (DoS)
2020-12-0604:23:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.0004 Low
EPSS
Percentile
14.2%
qemu is vulnerable to denial of service (DoS). The vulnerability exists in hw/pci/msix.c, allowing a malicious user to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qemu:stretch | eq | 1:2.8+dfsg-6+deb9u9 | |
| qemu:edge | eq | 4.2.0-r2 |
References
www.openwall.com/lists/oss-security/2020/06/01/6
www.openwall.com/lists/oss-security/2020/06/15/8
lists.debian.org/debian-lts-announce/2020/07/msg00020.html
lists.gnu.org/archive/html/qemu-devel/2020-06/msg00004.html
security-tracker.debian.org/tracker/CVE-2020-13754
security.gentoo.org/glsa/202011-09
security.netapp.com/advisory/ntap-20200608-0007/
usn.ubuntu.com/4467-1/
www.debian.org/security/2020/dsa-4728
Related
nvd
nvd
CVE-2020-13754
2020-06-02 14:15:10
prion
prion
Out-of-bounds
2020-06-02 14:15:00
cve
cve
CVE-2020-13754
2020-06-02 14:15:10
debiancve
debiancve
CVE-2020-13754
2020-06-02 14:15:10
cbl_mariner
cbl_mariner
CVE-2020-13754 affecting package qemu-kvm 4.2.0-48
2020-11-30 19:31:04
cvelist
cvelist
CVE-2020-13754
2020-06-02 13:37:25
openvas
openvas
Ubuntu: Security Advisory (USN-4467-3)
2021-02-23 00:00:00
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2020-2531)
2020-12-15 00:00:00
Debian: Security Advisory (DSA-4733-1)
2020-07-25 00:00:00
osv
osv
qemu regression
2021-02-22 16:04:05
CVE-2020-13754
2020-06-02 14:15:10
Moderate: virt:rhel and virt-devel:rhel security and bug fix update
2021-08-10 11:58:46
ubuntu
ubuntu
QEMU regression
2021-02-22 00:00:00
QEMU vulnerabilities
2021-02-02 00:00:00
QEMU vulnerabilities
2020-08-19 00:00:00
alpinelinux
alpinelinux
CVE-2020-13754
2020-06-02 14:15:10
redhatcve
redhatcve
CVE-2020-13754
2020-06-01 18:20:19
ubuntucve
ubuntucve
CVE-2020-13754
2020-06-02 00:00:00
redhat
redhat
nessus
nessus
RHEL 8 : virt:8.2 and virt-devel:8.2 (RHSA-2021:2521)
2021-06-27 00:00:00
EulerOS 2.0 SP8 : qemu (EulerOS-SA-2020-2531)
2020-12-14 00:00:00
Debian DSA-4733-1 : qemu - security update
2020-07-27 00:00:00
debian
debian
[SECURITY] [DSA 4733-1] qemu security update
2020-07-24 09:14:40
[SECURITY] [DSA 4728-1] qemu security update
2020-07-19 18:01:06
[SECURITY] [DLA 2288-1] qemu security update
2020-07-26 11:51:28
oraclelinux
oraclelinux
virt:ol and virt-devel:rhel security and bug fix update
2021-08-12 00:00:00
qemu security update
2021-02-08 00:00:00
f5
f5
rocky
rocky
virt:rhel and virt-devel:rhel security and bug fix update
2021-08-10 11:58:46
almalinux
almalinux
Moderate: virt:rhel and virt-devel:rhel security and bug fix update
2021-08-10 11:58:46
gentoo
gentoo
QEMU: Multiple vulnerabilities
2020-11-11 00:00:00