Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-11869 →
DEBIAN-CVE-2020-11869
An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.0-1"}]}]
Debian:13
qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.0-1"}]}]
Debian:14
qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.0-1"}]}]
Références
- advisory security-tracker.debian.org