CVE-2020-13765

CVE-2020-13765

Name

CVE-2020-13765

Description

rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Patch	https://git.qemu.org/?p=qemu.git;a=commit;h=e423455c4f23a1a828901c78fe6d03b7dde79319
Mailing List	https://www.openwall.com/lists/oss-security/2020/06/03/6
Third Party Advisory	https://security.netapp.com/advisory/ntap-20200619-0006/
MLIST	https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html
MLIST	https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html
UBUNTU	https://usn.ubuntu.com/4467-1/
MISC	https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676

Type

URI

Patch

https://git.qemu.org/?p=qemu.git;a=commit;h=e423455c4f23a1a828901c78fe6d03b7dde79319

Mailing List

https://www.openwall.com/lists/oss-security/2020/06/03/6

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200619-0006/

MLIST

https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html

MLIST

https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html