CVE-2020-27616 — Incorrect Calculation in Qemu

CWE-682 — Incorrect CalculationCWE-125 — Out-of-bounds Read9 documents7 sources
Severity
6.5MEDIUMNVD
OSV6.3
EPSS
0.4%
top 36.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
QemuDebian Qemu
Timeline
PublishedNov 6
Latest updateMay 24

Description

ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/qemu< qemu 1:5.2+dfsg-1 (bookworm)
▶Debianqemu/qemu< 1:5.2+dfsg-1+3
▶Ubuntuqemu/qemu< 1:2.5+dfsg-5ubuntu10.48+2
▶NVDqemu/qemu4.2.1

Patches

Patch: www.openwall.com ↗Patch: lists.nongnu.org ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-7r3q-28jv-xmcr: ati_2d_blt in hw/display/ati_2d↗2022-05-24
▶
OSV
qemu vulnerabilities↗2020-11-30
▶
OSV
CVE-2020-27616: ati_2d_blt in hw/display/ati_2d↗2020-11-06
▶

📋Vendor Advisories

3
Ubuntu
QEMU vulnerabilities↗2020-11-30
▶
Red Hat
QEMU: ati-vga: potential crash via invalid x y parameter values↗2020-10-18
▶
Debian
CVE-2020-27616: qemu - ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits ...↗2020
▶

💬Community

2
Bugzilla
CVE-2020-27616 QEMU: ati-vga: potential crash via invalid x y parameter values↗2020-11-03
▶
Bugzilla
CVE-2020-27616 qemu: ati-vga: potential crash via invalid x y parameter values [fedora-all]↗2020-11-03
▶