CVE-2020-11869 affecting package qemu-kvm 4.2.0-48

CVE-2020-11869 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

Ubuntu: Security Advisory (USN-4372-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4372-1: QEMU vulnerabilities

It was discovered that QEMU incorrectly handled bochs-display devices. A local attacker in a guest could use this to cause a denial of service or possibly execute arbitrary code in the host. This issue only affected Ubuntu 19.10. CVE-2019-15034 It was discovered that QEMU incorrectly handled memo...

CVE-2020-11869

CVE-2020-11869 : In QEMU versions 4.0.1–4.2.0, an integer overflow in ATI VGA emulation can crash the QEMU process (DoS) due to a flaw in ati_2d_blt() when handling MMIO writes via the ati_mm_write() callback in hw/display/ati-2d.c. The vulnerability is triggered through the ATI VGA display path ...