{"id":"CVE-2020-27616","aliases":["ALPINE-CVE-2020-27616","BELL-CVE-2020-27616","DEBIAN-CVE-2020-27616","EUVD-2020-20123","GHSA-7r3q-28jv-xmcr","SUSE-SU-2021:1243-1","UBUNTU-CVE-2020-27616","USN-4650-1","openSUSE-SU-2021:0600-1"],"status":"published","title":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a...","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02528,"percentile":0.85033,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-682"],"published":"2020-11-06T07:48:01Z","modified":"2026-11-03T06:32:25Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qemu","fixed_in":["5.0.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"qemu","fixed_in":["1:5.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["1:5.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["1:5.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"qemu","fixed_in":["1:4.2-3ubuntu6.10"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-11.16.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-11.16.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-11.16.3"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2-3ubuntu6.10"}]}],"versions":["1:4.0+dfsg-0ubuntu9","1:4.0+dfsg-0ubuntu10","1:4.2-1ubuntu1","1:4.2-1ubuntu2","1:4.2-3ubuntu1","1:4.2-3ubuntu2","1:4.2-3ubuntu3","1:4.2-3ubuntu4","1:4.2-3ubuntu5","1:4.2-3ubuntu6","1:4.2-3ubuntu6.1","1:4.2-3ubuntu6.2","1:4.2-3ubuntu6.3","1:4.2-3ubuntu6.4","1:4.2-3ubuntu6.5","1:4.2-3ubuntu6.6","1:4.2-3ubuntu6.7","1:4.2-3ubuntu6.8","1:4.2-3ubuntu6.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.5+dfsg-5ubuntu10.48"}]}],"versions":["1:2.3+dfsg-5ubuntu9","1:2.3+dfsg-5ubuntu10","1:2.4+dfsg-4ubuntu1","1:2.4+dfsg-4ubuntu2","1:2.4+dfsg-4ubuntu3","1:2.4+dfsg-5ubuntu3","1:2.5+dfsg-1ubuntu2","1:2.5+dfsg-1ubuntu3","1:2.5+dfsg-1ubuntu4","1:2.5+dfsg-1ubuntu5","1:2.5+dfsg-5ubuntu1","1:2.5+dfsg-5ubuntu2","1:2.5+dfsg-5ubuntu4","1:2.5+dfsg-5ubuntu6","1:2.5+dfsg-5ubuntu7","1:2.5+dfsg-5ubuntu10","1:2.5+dfsg-5ubuntu10.1","1:2.5+dfsg-5ubuntu10.2","1:2.5+dfsg-5ubuntu10.3","1:2.5+dfsg-5ubuntu10.4","1:2.5+dfsg-5ubuntu10.5","1:2.5+dfsg-5ubuntu10.6","1:2.5+dfsg-5ubuntu10.7","1:2.5+dfsg-5ubuntu10.8","1:2.5+dfsg-5ubuntu10.9","1:2.5+dfsg-5ubuntu10.10","1:2.5+dfsg-5ubuntu10.11","1:2.5+dfsg-5ubuntu10.13","1:2.5+dfsg-5ubuntu10.14","1:2.5+dfsg-5ubuntu10.15","1:2.5+dfsg-5ubuntu10.16","1:2.5+dfsg-5ubuntu10.20","1:2.5+dfsg-5ubuntu10.21","1:2.5+dfsg-5ubuntu10.22","1:2.5+dfsg-5ubuntu10.24","1:2.5+dfsg-5ubuntu10.25","1:2.5+dfsg-5ubuntu10.26","1:2.5+dfsg-5ubuntu10.28","1:2.5+dfsg-5ubuntu10.29","1:2.5+dfsg-5ubuntu10.30","1:2.5+dfsg-5ubuntu10.31","1:2.5+dfsg-5ubuntu10.32","1:2.5+dfsg-5ubuntu10.33","1:2.5+dfsg-5ubuntu10.34","1:2.5+dfsg-5ubuntu10.35","1:2.5+dfsg-5ubuntu10.36","1:2.5+dfsg-5ubuntu10.37","1:2.5+dfsg-5ubuntu10.38","1:2.5+dfsg-5ubuntu10.39","1:2.5+dfsg-5ubuntu10.40","1:2.5+dfsg-5ubuntu10.41","1:2.5+dfsg-5ubuntu10.42","1:2.5+dfsg-5ubuntu10.43","1:2.5+dfsg-5ubuntu10.44","1:2.5+dfsg-5ubuntu10.45","1:2.5+dfsg-5ubuntu10.46","1:2.5+dfsg-5ubuntu10.47"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.11+dfsg-1ubuntu7.34"}]}],"versions":["1:2.10+dfsg-0ubuntu3","1:2.10+dfsg-0ubuntu4","1:2.10+dfsg-0ubuntu5","1:2.11+dfsg-1ubuntu1","1:2.11+dfsg-1ubuntu2","1:2.11+dfsg-1ubuntu4","1:2.11+dfsg-1ubuntu5","1:2.11+dfsg-1ubuntu6","1:2.11+dfsg-1ubuntu7","1:2.11+dfsg-1ubuntu7.1","1:2.11+dfsg-1ubuntu7.2","1:2.11+dfsg-1ubuntu7.3","1:2.11+dfsg-1ubuntu7.4","1:2.11+dfsg-1ubuntu7.5","1:2.11+dfsg-1ubuntu7.6","1:2.11+dfsg-1ubuntu7.7","1:2.11+dfsg-1ubuntu7.8","1:2.11+dfsg-1ubuntu7.9","1:2.11+dfsg-1ubuntu7.10","1:2.11+dfsg-1ubuntu7.12","1:2.11+dfsg-1ubuntu7.13","1:2.11+dfsg-1ubuntu7.14","1:2.11+dfsg-1ubuntu7.15","1:2.11+dfsg-1ubuntu7.17","1:2.11+dfsg-1ubuntu7.18","1:2.11+dfsg-1ubuntu7.19","1:2.11+dfsg-1ubuntu7.20","1:2.11+dfsg-1ubuntu7.21","1:2.11+dfsg-1ubuntu7.22","1:2.11+dfsg-1ubuntu7.23","1:2.11+dfsg-1ubuntu7.25","1:2.11+dfsg-1ubuntu7.26","1:2.11+dfsg-1ubuntu7.27","1:2.11+dfsg-1ubuntu7.28","1:2.11+dfsg-1ubuntu7.29","1:2.11+dfsg-1ubuntu7.31","1:2.11+dfsg-1ubuntu7.32","1:2.11+dfsg-1ubuntu7.33"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2-3ubuntu6.10"}]}],"versions":["1:4.0+dfsg-0ubuntu9","1:4.0+dfsg-0ubuntu10","1:4.2-1ubuntu1","1:4.2-1ubuntu2","1:4.2-3ubuntu1","1:4.2-3ubuntu2","1:4.2-3ubuntu3","1:4.2-3ubuntu4","1:4.2-3ubuntu5","1:4.2-3ubuntu6","1:4.2-3ubuntu6.1","1:4.2-3ubuntu6.2","1:4.2-3ubuntu6.3","1:4.2-3ubuntu6.4","1:4.2-3ubuntu6.5","1:4.2-3ubuntu6.6","1:4.2-3ubuntu6.7","1:4.2-3ubuntu6.8","1:4.2-3ubuntu6.9"],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-lp152.9.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-lp152.9.12.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"qemu-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-lp152.9.12.1"}]}],"bundled":15}],"products":[{"vendor":"qemu","product":"qemu"}],"references":[{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05018.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2020/11/03/2","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20201202-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27616"},{"url":"https://github.com/advisories/GHSA-7r3q-28jv-xmcr"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-27616","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-27616","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-27616","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211243-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1172385","tags":["report"]},{"url":"https://bugzilla.suse.com/1173612","tags":["report"]},{"url":"https://bugzilla.suse.com/1176673","tags":["report"]},{"url":"https://bugzilla.suse.com/1176682","tags":["report"]},{"url":"https://bugzilla.suse.com/1176684","tags":["report"]},{"url":"https://bugzilla.suse.com/1178174","tags":["report"]},{"url":"https://bugzilla.suse.com/1178400","tags":["report"]},{"url":"https://bugzilla.suse.com/1178934","tags":["report"]},{"url":"https://bugzilla.suse.com/1179466","tags":["report"]},{"url":"https://bugzilla.suse.com/1179467","tags":["report"]},{"url":"https://bugzilla.suse.com/1179468","tags":["report"]},{"url":"https://bugzilla.suse.com/1179686","tags":["report"]},{"url":"https://bugzilla.suse.com/1181108","tags":["report"]},{"url":"https://bugzilla.suse.com/1182425","tags":["report"]},{"url":"https://bugzilla.suse.com/1182577","tags":["report"]},{"url":"https://bugzilla.suse.com/1182968","tags":["report"]},{"url":"https://bugzilla.suse.com/1184064","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3416","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-27616","tags":["report"]},{"url":"https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg06080.html","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/11/03/2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4650-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-17380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27617","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ATYM36RK6JXDXZ33F2KFHZHDZ3F3YD24/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-27616","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","status":"published","published":"2020-11-06T07:48:01Z","modified":"2024-08-04T16:18:45.507Z","updated_at":"2026-11-02T14:35:53.552996Z"}],"euvd":[{"id":"EUVD-2020-20123","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","status":"published","published":"2020-11-06T07:48:01Z","modified":"2024-08-04T16:18:45Z","updated_at":"2026-11-03T03:07:12.435876Z"}],"ghsa":[{"id":"GHSA-7r3q-28jv-xmcr","title":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a...","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","status":"published","published":"2022-05-24T17:33:19Z","modified":"2023-01-29T05:04:36Z","cwes":["CWE-682"],"updated_at":"2026-11-02T14:45:36.114986Z"}],"nvd":[{"id":"CVE-2020-27616","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","status":"published","published":"2020-11-06T08:15:13.737Z","modified":"2026-06-17T03:09:21.937Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:06:21.80969Z"}],"osv":[{"id":"ALPINE-CVE-2020-27616","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","status":"published","published":"2020-11-06T08:15:13.737Z","modified":"2026-11-03T06:32:25.372920268Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"BELL-CVE-2020-27616","title":"CVE-2020-27616 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:20.990912Z","modified":"2026-01-26T09:47:11.481949Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-27616","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","status":"published","published":"2020-11-06T08:15:13.737Z","modified":"2026-10-24T10:30:55.200248839Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-27616","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","status":"published","published":"2020-11-06T08:15:13.737Z","modified":"2026-10-26T12:02:41.669965719Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"UBUNTU-CVE-2020-27616","description":"ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.","status":"published","published":"2020-11-06T08:15:00Z","modified":"2026-02-04T03:41:31.775634Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"openSUSE-SU-2021:0600-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2020-12829: Fix OOB access in sm501 device emulation (bsc#1172385)\n- CVE-2020-25723: Fix use-after-free in usb xhci packet handling (bsc#1178934)\n- CVE-2020-25084: Fix use-after-free in usb ehci packet handling (bsc#1176673)\n- CVE-2020-25625: Fix infinite loop (DoS) in usb hcd-ohci emulation (bsc#1176684)\n- CVE-2020-25624: Fix OOB access in usb hcd-ohci emulation (bsc#1176682)\n- CVE-2020-27617: Fix guest triggerable assert in shared network handling code (bsc#1178174)\n- CVE-2020-28916: Fix infinite loop (DoS) in e1000e device emulation (bsc#1179468)\n- CVE-2020-29443: Fix OOB access in atapi emulation (bsc#1181108)\n- CVE-2020-27821: Fix heap overflow in MSIx emulation (bsc#1179686)\n- CVE-2020-15469: Fix null pointer deref. (DoS) in mmio ops (bsc#1173612)\n- CVE-2021-20257: Fix infinite loop (DoS) in e1000 device emulation (bsc#1182577)\n- CVE-2021-3416:  Fix OOB access (stack overflow) in rtl8139 NIC emulation (bsc#1182968)\n- CVE-2021-3416:  Fix OOB access (stack overflow) in other NIC emulations (bsc#1182968)\n- CVE-2020-27616: Fix OOB access in ati-vga emulation (bsc#1178400)\n- CVE-2020-29129: Fix OOB access in SLIRP ARP/NCSI packet processing (bsc#1179466, CVE-2020-29130, bsc#1179467)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- Add split-provides through forsplits/13 to cover updates of SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (bsc#1184064)\n- Added a few more usability improvements for our git packaging workflow\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-04-23T10:46:42Z","modified":"2026-02-04T03:55:10.460208Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:1243-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2020-12829: Fix OOB access in sm501 device emulation (bsc#1172385)\n- CVE-2020-25723: Fix use-after-free in usb xhci packet handling (bsc#1178934)\n- CVE-2020-25084: Fix use-after-free in usb ehci packet handling (bsc#1176673)\n- CVE-2020-25625: Fix infinite loop (DoS) in usb hcd-ohci emulation (bsc#1176684)\n- CVE-2020-25624: Fix OOB access in usb hcd-ohci emulation (bsc#1176682)\n- CVE-2020-27617: Fix guest triggerable assert in shared network handling code (bsc#1178174)\n- CVE-2020-28916: Fix infinite loop (DoS) in e1000e device emulation (bsc#1179468)\n- CVE-2020-29443: Fix OOB access in atapi emulation (bsc#1181108)\n- CVE-2020-27821: Fix heap overflow in MSIx emulation (bsc#1179686)\n- CVE-2020-15469: Fix null pointer deref. (DoS) in mmio ops (bsc#1173612)\n- CVE-2021-20257: Fix infinite loop (DoS) in e1000 device emulation (bsc#1182577)\n- CVE-2021-3416:  Fix OOB access (stack overflow) in rtl8139 NIC emulation (bsc#1182968)\n- CVE-2021-3416:  Fix OOB access (stack overflow) in other NIC emulations (bsc#1182968)\n- CVE-2020-27616: Fix OOB access in ati-vga emulation (bsc#1178400)\n- CVE-2020-29129: Fix OOB access in SLIRP ARP/NCSI packet processing (bsc#1179466, CVE-2020-29130, bsc#1179467)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- Add split-provides through forsplits/13 to cover updates of SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (bsc#1184064)\n- Added a few more usability improvements for our git packaging workflow\n","status":"published","published":"2021-04-16T12:45:20Z","modified":"2026-02-04T03:56:00.16597Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4650-1","title":"qemu vulnerabilities","description":"Alexander Bulekov discovered that QEMU incorrectly handled SDHCI device\nemulation. An attacker inside the guest could use this issue to cause QEMU\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode on the host. In the default installation, when QEMU is used with\nlibvirt, attackers would be isolated by the libvirt AppArmor profile. \n(CVE-2020-17380)\n\nSergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU\nincorrectly handled USB device emulation. An attacker inside the guest\ncould use this issue to cause QEMU to crash, resulting in a denial of\nservice. (CVE-2020-25084)\n\nSergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU\nincorrectly handled SDHCI device emulation. An attacker inside the guest\ncould use this issue to cause QEMU to crash, resulting in a denial of\nservice. (CVE-2020-25085)\n\nGaoning Pan, Yongkang Jia, and Yi Ren discovered that QEMU incorrectly\nhandled USB device emulation. An attacker inside the guest could use this\nissue to cause QEMU to crash, resulting in a denial of service.\n(CVE-2020-25624)\n\nIt was discovered that QEMU incorrectly handled USB device emulation. An\nattacker inside the guest could use this issue to cause QEMU to hang,\nresulting in a denial of service. (CVE-2020-25625)\n\nCheolwoo Myung discovered that QEMU incorrectly handled USB device\nemulation. An attacker inside the guest could use this issue to cause QEMU\nto crash, resulting in a denial of service. (CVE-2020-25723)\n\nGaoning Pan discovered that QEMU incorrectly handled ATI graphics device\nemulation. An attacker inside the guest could use this issue to cause QEMU\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n20.04 LTS and Ubuntu 20.10. (CVE-2020-27616)\n\nGaoning Pan discovered that QEMU incorrectly handled networking. An\nattacker inside the guest could use this issue to cause QEMU to crash,\nresulting in a denial of service. (CVE-2020-27617)\n","status":"published","published":"2020-11-30T12:25:14Z","modified":"2026-04-27T16:03:36.278772402Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}