Summary
USN-4467-1 fixed vulnerabilities in QEMU. The fix for CVE-2020-13754
introduced a regression in certain environments. This update fixes the
problem.
We apologize for the inconvenience.
Original advisory details:
Ren Ding, Hanqing Zhao, Alexander Bulekov, and Anatoly Trosinenko
discovered that the QEMU incorrectly handled certain msi-x mmio operations.
An attacker inside a guest could possibly use this issue to cause QEMU to
crash, resulting in a denial of service. (CVE-2020-13754)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | qemu | 1:2.5+dfsg-5ubuntu10.51 |
| Ubuntu · 18.04 LTS 18.04:LTS | qemu | 1:2.11+dfsg-1ubuntu7.36 |
| Ubuntu · 20.04 LTS 20.04:LTS | qemu | 1:4.2-3ubuntu6.14 |
References
-
report
https://launchpad.net/bugs/1914883