Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-15863

Опубликовано: 28 июл. 2020
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.4
CVSS3: 5.3

Описание

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

РелизСтатусПримечание
bionic

released

1:2.11+dfsg-1ubuntu7.31
devel

not-affected

1:4.2-3ubuntu10
esm-infra-legacy/trusty

needed

esm-infra/bionic

not-affected

1:2.11+dfsg-1ubuntu7.31
esm-infra/focal

not-affected

1:4.2-3ubuntu6.4
esm-infra/xenial

not-affected

1:2.5+dfsg-5ubuntu10.45
focal

released

1:4.2-3ubuntu6.4
groovy

not-affected

1:4.2-3ubuntu10
hirsute

not-affected

1:4.2-3ubuntu10
impish

not-affected

1:4.2-3ubuntu10

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

EPSS

Процентиль: 8%
0.00034
Низкий

4.4 Medium

CVSS2

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
почти 5 лет назад

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

CVSS3: 5.3
nvd
почти 5 лет назад

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

CVSS3: 5.3
msrc
почти 5 лет назад

Описание отсутствует

CVSS3: 5.3
debian
почти 5 лет назад

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2 ...

CVSS3: 5.3
github
около 3 лет назад

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

EPSS

Процентиль: 8%
0.00034
Низкий

4.4 Medium

CVSS2

5.3 Medium

CVSS3

Уязвимость CVE-2020-15863