Wind River Support Network

HomeDefectsLIN1019-4807

Fixed

LIN1019-4807 : Security Advisory - qemu - CVE-2020-13800

Created: Jun 8, 2020 Updated: Jul 2, 2020

Resolved Date: Jun 17, 2020

Found In Version: 10.19.45.1

Fix Version: 10.19.45.9

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.

CREATE(Triage):(User=admin) [CVE-2020-13800|https://nvd.nist.gov/vuln/detail/CVE-2020-13800]

CVEs

CVE-2020-13800