Lucene search
PRIOn knowledge basePRION:CVE-2020-13765HistoryJun 04, 2020 - 4:15 p.m.
Design/Logic Flaw
2020-06-0416:15:00
PRIOn knowledge base
www.prio-n.com
8
rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 20.04 | |
| ubuntu_linux | eq | 16.04 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| qemu | eq | 4.0.0 | |
| qemu | eq | 4.1.0 |
References
git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e423455c4f23a1a828901c78fe6d03b7dde79319
github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676
lists.debian.org/debian-lts-announce/2020/06/msg00032.html
lists.debian.org/debian-lts-announce/2020/07/msg00020.html
security.netapp.com/advisory/ntap-20200619-0006/
usn.ubuntu.com/4467-1/
www.openwall.com/lists/oss-security/2020/06/03/6
Related
alpinelinux
alpinelinux
CVE-2020-13765
2020-06-04 16:15:12
redhatcve
redhatcve
CVE-2020-13765
2020-06-03 19:21:57
cvelist
cvelist
CVE-2020-13765
2020-06-04 15:26:17
nvd
nvd
CVE-2020-13765
2020-06-04 16:15:12
cve
cve
CVE-2020-13765
2020-06-04 16:15:12
ubuntucve
ubuntucve
CVE-2020-13765
2020-06-04 00:00:00
debiancve
debiancve
CVE-2020-13765
2020-06-04 16:15:12
veracode
veracode
Arbitrary Code Execution
2020-09-21 06:33:30
openvas
openvas
QEMU <= 4.1.0 Arbitrary Write Vulnerability
2020-07-22 00:00:00
CentOS: Security Advisory for qemu-img (CESA-2021:0347)
2021-02-04 00:00:00
Debian: Security Advisory (DLA-2262-1)
2020-06-30 00:00:00
osv
osv
CVE-2020-13765
2020-06-04 16:15:12
qemu - security update
2020-06-29 00:00:00
qemu - security update
2020-07-19 00:00:00
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2021-02-03 00:00:00
qemu security update
2021-02-08 00:00:00
centos
centos
qemu security update
2021-02-04 01:05:06
nessus
nessus
Amazon Linux 2 : qemu (ALAS-2021-1617)
2021-03-19 00:00:00
CentOS 7 : qemu-kvm (CESA-2021:0347)
2021-02-03 00:00:00
RHEL 7 : qemu-kvm (RHSA-2021:0347)
2021-02-03 00:00:00
redhat
redhat
(RHSA-2021:0347) Moderate: qemu-kvm security and bug fix update
2021-02-02 09:29:16
amazon
amazon
Medium: qemu-kvm
2021-03-18 17:30:00
Medium: qemu
2021-03-18 01:13:00
debian
debian
[SECURITY] [DLA 2262-1] qemu security update
2020-06-29 20:49:03
[SECURITY] [DLA 2288-1] qemu security update
2020-07-26 11:51:28
ubuntu
ubuntu
QEMU vulnerabilities
2020-08-19 00:00:00