USN-4283-1 qemu vulnerabilities

Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that QEMU incorrectly handled iSCSI server responses. A remote attacker in control of the iSCSI server could use this issue to cause QEMU to crash, leading to a denial of service, or possibly execute arbitrary code. CVE-2020-1711 I...

PT-2020-2007 · Qemu +9 · Qemu +9

Name of the Vulnerable Software and Affected Versions: QEMU versions 4.2.0 libslirp version 4.1.0 Description: The issue is related to a memory management error in the tcp emu function of the QEMU software, which can be exploited by a remote attacker to access confidential data, compromise data...