A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2021/03/09/1 | Mailing List Patch Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1862167 | Issue Tracking Patch Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html | Mailing List Third Party Advisory |
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg01175.html | Mailing List Patch Third Party Advisory |
https://security.netapp.com/advisory/ntap-20210312-0003/ | Third Party Advisory |
Configurations
History
14 Oct 2022, 03:48
Type | Values Removed | Values Added |
---|---|---|
First Time |
Debian debian Linux
Debian |
|
References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html - Mailing List, Third Party Advisory | |
CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
11 Apr 2021, 01:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
15 Mar 2021, 18:52
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://security.netapp.com/advisory/ntap-20210312-0003/ - Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2021/03/09/1 - Mailing List, Patch, Third Party Advisory |
12 Mar 2021, 13:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
09 Mar 2021, 16:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
05 Feb 2021, 21:22
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 4.6
v3 : 6.3 |
05 Feb 2021, 18:44
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-787 | |
References | (CONFIRM) https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg01175.html - Mailing List, Patch, Third Party Advisory | |
References | (CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=1862167 - Issue Tracking, Patch, Third Party Advisory | |
CPE | cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 4.6
v3 : 7.8 |
30 Jan 2021, 06:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-01-30 06:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-17380
Mitre link : CVE-2020-17380
CVE.ORG link : CVE-2020-17380
JSON object : View
Products Affected
debian
- debian_linux
qemu
- qemu
CWE
CWE-787
Out-of-bounds Write