Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-27821

Опубликовано: 08 дек. 2020
Источник: nvd
CVSS3: 6
CVSS2: 2.1
EPSS Низкий

Описание

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 5.2.0 (исключая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 4%
0.00022
Низкий

6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 6
ubuntu
больше 4 лет назад

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

CVSS3: 5.7
redhat
больше 4 лет назад

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

CVSS3: 6
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 6
debian
больше 4 лет назад

A flaw was found in the memory management API of QEMU during the initi ...

CVSS3: 6
github
около 3 лет назад

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

EPSS

Процентиль: 4%
0.00022
Низкий

6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-787
CWE-787