CVE-2020-27821

2020-12-0821:33:02

CWE-787

redhat

www.cve.org

qemu

memory management

out-of-bounds access

denial of service

AI Score

6.3

Confidence

High

EPSS

Percentile

5.1%

JSON

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

CNA Affected

[
  {
    "product": "QEMU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 5.2.0"
      }
    ]
  }
]