NetSight
IP …
medium5.0

CVE-2020-14364

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0.

Impact

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Affected products

VendorProductAffected versions
QemuQemu
before 5.2.0
RedhatOpenstack
Versions 10, 13
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0
FedoraprojectFedora
Versions 31, 32
DebianDebian Linux
Versions 9.0, 10.0
OpensuseLeap
Version 15.2
CanonicalUbuntu Linux
Versions 16.04, 18.04, 20.04

Weakness classification

CWE-125CWE-787

References