DeutschShown in its original language — a full translation is planned for a future version.
QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes
view advisory published 2021-01-31
Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand herbeizuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-17380US | medium6.3 | — | ||
A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transf… | ||||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-2623 vom 2021-04-10external
- Debian Security Advisory DLA-3362 vom 2023-03-14external
- QEMU Devel Mailing Listexternal
- SUSE Security Update SUSE-SU-2021:1942-1 vom 2021-06-10external
- SUSE Security Update SUSE-SU-2022:3594-1 vom 2022-10-17external
- SUSE Security Update SUSE-SU-2022:3768-1 vom 2022-10-26external
- SUSE Security Update SUSE-SU-2023:0761-1 vom 2023-03-16external
- NIST Database vom 2021-01-31external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan