QwikSec

Security Database

CVE

CWE

Training

CVE-2020-15863

Published: Jul 28, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg03497.html

x_refsource_MISC

http://www.openwall.com/lists/oss-security/2020/07/22/1

x_refsource_CONFIRM

https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=5519724a13664b43e225ca05351c60b4468e4555

x_refsource_CONFIRM

https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg05745.html

x_refsource_MISC

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_DEBIAN

openSUSE-SU-2020:1664

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.