usn-4650-1
Vulnerability from osv_ubuntu
Published
2020-11-30 12:25
Modified
2026-04-27 14:11
Summary
qemu vulnerabilities
Details

Alexander Bulekov discovered that QEMU incorrectly handled SDHCI device emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code on the host. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. (CVE-2020-17380)

Sergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU incorrectly handled USB device emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-25084)

Sergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU incorrectly handled SDHCI device emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-25085)

Gaoning Pan, Yongkang Jia, and Yi Ren discovered that QEMU incorrectly handled USB device emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-25624)

It was discovered that QEMU incorrectly handled USB device emulation. An attacker inside the guest could use this issue to cause QEMU to hang, resulting in a denial of service. (CVE-2020-25625)

Cheolwoo Myung discovered that QEMU incorrectly handled USB device emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-25723)

Gaoning Pan discovered that QEMU incorrectly handled ATI graphics device emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2020-27616)

Gaoning Pan discovered that QEMU incorrectly handled networking. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-27617)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2020-17380",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25084",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25085",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25624",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25625",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25723",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-27617",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-aarch64",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:2.5+dfsg-5ubuntu10.48"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:2.5+dfsg-5ubuntu10.48?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.5+dfsg-5ubuntu10.48"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.3+dfsg-5ubuntu9",
        "1:2.3+dfsg-5ubuntu10",
        "1:2.4+dfsg-4ubuntu1",
        "1:2.4+dfsg-4ubuntu2",
        "1:2.4+dfsg-4ubuntu3",
        "1:2.4+dfsg-5ubuntu3",
        "1:2.5+dfsg-1ubuntu2",
        "1:2.5+dfsg-1ubuntu3",
        "1:2.5+dfsg-1ubuntu4",
        "1:2.5+dfsg-1ubuntu5",
        "1:2.5+dfsg-5ubuntu1",
        "1:2.5+dfsg-5ubuntu2",
        "1:2.5+dfsg-5ubuntu4",
        "1:2.5+dfsg-5ubuntu6",
        "1:2.5+dfsg-5ubuntu7",
        "1:2.5+dfsg-5ubuntu10",
        "1:2.5+dfsg-5ubuntu10.1",
        "1:2.5+dfsg-5ubuntu10.2",
        "1:2.5+dfsg-5ubuntu10.3",
        "1:2.5+dfsg-5ubuntu10.4",
        "1:2.5+dfsg-5ubuntu10.5",
        "1:2.5+dfsg-5ubuntu10.6",
        "1:2.5+dfsg-5ubuntu10.7",
        "1:2.5+dfsg-5ubuntu10.8",
        "1:2.5+dfsg-5ubuntu10.9",
        "1:2.5+dfsg-5ubuntu10.10",
        "1:2.5+dfsg-5ubuntu10.11",
        "1:2.5+dfsg-5ubuntu10.13",
        "1:2.5+dfsg-5ubuntu10.14",
        "1:2.5+dfsg-5ubuntu10.15",
        "1:2.5+dfsg-5ubuntu10.16",
        "1:2.5+dfsg-5ubuntu10.20",
        "1:2.5+dfsg-5ubuntu10.21",
        "1:2.5+dfsg-5ubuntu10.22",
        "1:2.5+dfsg-5ubuntu10.24",
        "1:2.5+dfsg-5ubuntu10.25",
        "1:2.5+dfsg-5ubuntu10.26",
        "1:2.5+dfsg-5ubuntu10.28",
        "1:2.5+dfsg-5ubuntu10.29",
        "1:2.5+dfsg-5ubuntu10.30",
        "1:2.5+dfsg-5ubuntu10.31",
        "1:2.5+dfsg-5ubuntu10.32",
        "1:2.5+dfsg-5ubuntu10.33",
        "1:2.5+dfsg-5ubuntu10.34",
        "1:2.5+dfsg-5ubuntu10.35",
        "1:2.5+dfsg-5ubuntu10.36",
        "1:2.5+dfsg-5ubuntu10.37",
        "1:2.5+dfsg-5ubuntu10.38",
        "1:2.5+dfsg-5ubuntu10.39",
        "1:2.5+dfsg-5ubuntu10.40",
        "1:2.5+dfsg-5ubuntu10.41",
        "1:2.5+dfsg-5ubuntu10.42",
        "1:2.5+dfsg-5ubuntu10.43",
        "1:2.5+dfsg-5ubuntu10.44",
        "1:2.5+dfsg-5ubuntu10.45",
        "1:2.5+dfsg-5ubuntu10.46",
        "1:2.5+dfsg-5ubuntu10.47"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2020-17380",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25084",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25085",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25624",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25625",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25723",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-27617",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:2.11+dfsg-1ubuntu7.34"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:2.11+dfsg-1ubuntu7.34?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:2.11+dfsg-1ubuntu7.34"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:2.10+dfsg-0ubuntu3",
        "1:2.10+dfsg-0ubuntu4",
        "1:2.10+dfsg-0ubuntu5",
        "1:2.11+dfsg-1ubuntu1",
        "1:2.11+dfsg-1ubuntu2",
        "1:2.11+dfsg-1ubuntu4",
        "1:2.11+dfsg-1ubuntu5",
        "1:2.11+dfsg-1ubuntu6",
        "1:2.11+dfsg-1ubuntu7",
        "1:2.11+dfsg-1ubuntu7.1",
        "1:2.11+dfsg-1ubuntu7.2",
        "1:2.11+dfsg-1ubuntu7.3",
        "1:2.11+dfsg-1ubuntu7.4",
        "1:2.11+dfsg-1ubuntu7.5",
        "1:2.11+dfsg-1ubuntu7.6",
        "1:2.11+dfsg-1ubuntu7.7",
        "1:2.11+dfsg-1ubuntu7.8",
        "1:2.11+dfsg-1ubuntu7.9",
        "1:2.11+dfsg-1ubuntu7.10",
        "1:2.11+dfsg-1ubuntu7.12",
        "1:2.11+dfsg-1ubuntu7.13",
        "1:2.11+dfsg-1ubuntu7.14",
        "1:2.11+dfsg-1ubuntu7.15",
        "1:2.11+dfsg-1ubuntu7.17",
        "1:2.11+dfsg-1ubuntu7.18",
        "1:2.11+dfsg-1ubuntu7.19",
        "1:2.11+dfsg-1ubuntu7.20",
        "1:2.11+dfsg-1ubuntu7.21",
        "1:2.11+dfsg-1ubuntu7.22",
        "1:2.11+dfsg-1ubuntu7.23",
        "1:2.11+dfsg-1ubuntu7.25",
        "1:2.11+dfsg-1ubuntu7.26",
        "1:2.11+dfsg-1ubuntu7.27",
        "1:2.11+dfsg-1ubuntu7.28",
        "1:2.11+dfsg-1ubuntu7.29",
        "1:2.11+dfsg-1ubuntu7.31",
        "1:2.11+dfsg-1ubuntu7.32",
        "1:2.11+dfsg-1ubuntu7.33"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2020-17380",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25084",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25085",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25624",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25625",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-25723",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-27616",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2020-27617",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "qemu",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-block-extra",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-guest-agent",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-kvm",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-arm",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-common",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-data",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-gui",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-mips",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-misc",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-ppc",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-s390x",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-sparc",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-x86",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-x86-microvm",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-system-x86-xen",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-user",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-user-binfmt",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-user-static",
            "binary_version": "1:4.2-3ubuntu6.10"
          },
          {
            "binary_name": "qemu-utils",
            "binary_version": "1:4.2-3ubuntu6.10"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "qemu",
        "purl": "pkg:deb/ubuntu/qemu@1:4.2-3ubuntu6.10?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:4.2-3ubuntu6.10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:4.0+dfsg-0ubuntu9",
        "1:4.0+dfsg-0ubuntu10",
        "1:4.2-1ubuntu1",
        "1:4.2-1ubuntu2",
        "1:4.2-3ubuntu1",
        "1:4.2-3ubuntu2",
        "1:4.2-3ubuntu3",
        "1:4.2-3ubuntu4",
        "1:4.2-3ubuntu5",
        "1:4.2-3ubuntu6",
        "1:4.2-3ubuntu6.1",
        "1:4.2-3ubuntu6.2",
        "1:4.2-3ubuntu6.3",
        "1:4.2-3ubuntu6.4",
        "1:4.2-3ubuntu6.5",
        "1:4.2-3ubuntu6.6",
        "1:4.2-3ubuntu6.7",
        "1:4.2-3ubuntu6.8",
        "1:4.2-3ubuntu6.9"
      ]
    }
  ],
  "aliases": [],
  "details": "Alexander Bulekov discovered that QEMU incorrectly handled SDHCI device\nemulation. An attacker inside the guest could use this issue to cause QEMU\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode on the host. In the default installation, when QEMU is used with\nlibvirt, attackers would be isolated by the libvirt AppArmor profile. \n(CVE-2020-17380)\n\nSergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU\nincorrectly handled USB device emulation. An attacker inside the guest\ncould use this issue to cause QEMU to crash, resulting in a denial of\nservice. (CVE-2020-25084)\n\nSergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU\nincorrectly handled SDHCI device emulation. An attacker inside the guest\ncould use this issue to cause QEMU to crash, resulting in a denial of\nservice. (CVE-2020-25085)\n\nGaoning Pan, Yongkang Jia, and Yi Ren discovered that QEMU incorrectly\nhandled USB device emulation. An attacker inside the guest could use this\nissue to cause QEMU to crash, resulting in a denial of service.\n(CVE-2020-25624)\n\nIt was discovered that QEMU incorrectly handled USB device emulation. An\nattacker inside the guest could use this issue to cause QEMU to hang,\nresulting in a denial of service. (CVE-2020-25625)\n\nCheolwoo Myung discovered that QEMU incorrectly handled USB device\nemulation. An attacker inside the guest could use this issue to cause QEMU\nto crash, resulting in a denial of service. (CVE-2020-25723)\n\nGaoning Pan discovered that QEMU incorrectly handled ATI graphics device\nemulation. An attacker inside the guest could use this issue to cause QEMU\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n20.04 LTS and Ubuntu 20.10. (CVE-2020-27616)\n\nGaoning Pan discovered that QEMU incorrectly handled networking. An\nattacker inside the guest could use this issue to cause QEMU to crash,\nresulting in a denial of service. (CVE-2020-27617)\n",
  "id": "USN-4650-1",
  "modified": "2026-04-27T14:11:26Z",
  "published": "2020-11-30T12:25:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4650-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-17380"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-25084"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-25085"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-25624"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-25625"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-25723"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-27616"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-27617"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "qemu vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2020-17380",
    "UBUNTU-CVE-2020-25084",
    "UBUNTU-CVE-2020-25085",
    "UBUNTU-CVE-2020-25624",
    "UBUNTU-CVE-2020-25625",
    "UBUNTU-CVE-2020-25723",
    "UBUNTU-CVE-2020-27616",
    "UBUNTU-CVE-2020-27617"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.