Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-24165
HistoryAug 28, 2023 - 12:00 a.m.

CVE-2020-24165

2023-08-2800:00:00
ubuntu.com
ubuntu.com
5
cve-2020-24165
local attackers
arbitrary code
escalate privileges
denial of service
bug 1863025
qemu
upstream fix

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

DISPUTED An issue was discovered in TCG Accelerator in QEMU 4.2.0,
allows local attackers to execute arbitrary code, escalate privileges, and
cause a denial of service (DoS). Note: This is disputed as a bug and not a
valid security issue by multiple third parties.

Bugs

Notes

Author Note
alexmurray This was fixed upstream in the 5.0.0 release
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchqemu< anyUNKNOWN
ubuntu20.04noarchqemu< 1:4.2-3ubuntu6.28UNKNOWN

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%