Wind River Support Network

HomeDefectsLIN9-9970
Fixed

LIN9-9970 : Security Advisory - qemu - CVE-2020-13362

Created: May 31, 2020    Updated: Aug 20, 2020
Resolved Date: Jul 30, 2020
Found In Version: 9.0.0.1
Fix Version: 9.0.0.26
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

In QEMU 4.2.0, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.

CREATE(Triage):(User=admin) [CVE-2020-13362|https://nvd.nist.gov/vuln/detail/CVE-2020-13362]

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube