Unrated

iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an...

CVE-2020-11947 First seen on SecPulse Dec 31, 2020

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-11947 qemu Fixed in: 1:4.2-7
Ubuntu UBUNTU-CVE-2020-11947 qemu Fixed in: 2.0.0+dfsg-2ubuntu1.47+esm6

Original description The description as published by the source.

iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory security.netapp.com
patch openwall.com
web git.qemu.org

Key facts

Severity: Unrated
Published: Dec 31, 2020
First seen on SecPulse: Dec 31, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51