5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
6.8 Medium
AI Score
Confidence
High
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0005 Low
EPSS
Percentile
15.9%
Ziming Zhang, Xiao Wei, Gonglei Arei, and Yanyu Zhang discovered that QEMU
incorrectly handled certain USB packets. An attacker inside the guest could
use this issue to cause QEMU to crash, resulting in a denial of service, or
possibly execute arbitrary code on the host. In the default installation,
when QEMU is used with libvirt, attackers would be isolated by the libvirt
AppArmor profile.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 20.04 | noarch | qemu | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-block-extra | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-block-extra-dbgsym | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-guest-agent | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-guest-agent-dbgsym | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-kvm | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-system | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-system-arm | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-system-arm-dbgsym | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
Ubuntu | 20.04 | noarch | qemu-system-common | <Â 1:4.2-3ubuntu6.6 | UNKNOWN |
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
6.8 Medium
AI Score
Confidence
High
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0005 Low
EPSS
Percentile
15.9%