OESA-2021-1072

Dashboard / Vulnerabilities / OESA-2021-1072

OESA-2021-1072

Summary: qemu security update

Details: QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation.(CVE-2020-13754) In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.(CVE-2019-20808) A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.(CVE-2020-17380)

References: https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1072, https://nvd.nist.gov/vuln/detail/CVE-2020-13754, https://nvd.nist.gov/vuln/detail/CVE-2019-20808, https://nvd.nist.gov/vuln/detail/CVE-2020-17380