Unrated
sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS u...
CVE-2020-13253
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-13253 qemu Fixed in: 1:5.0-8
Original description The description as published by the source.
References
- advisory lists.debian.org
- advisory lists.debian.org
- advisory security.gentoo.org
- advisory usn.ubuntu.com
- patch openwall.com
- patch bugzilla.redhat.com
- patch lists.gnu.org