Summary
Ziming Zhang, Xiao Wei, Gonglei Arei, and Yanyu Zhang discovered that QEMU
incorrectly handled certain USB packets. An attacker inside the guest could
use this issue to cause QEMU to crash, resulting in a denial of service, or
possibly execute arbitrary code on the host. In the default installation,
when QEMU is used with libvirt, attackers would be isolated by the libvirt
AppArmor profile.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | qemu | 1:2.5+dfsg-5ubuntu10.46 |
| Ubuntu · 18.04 LTS 18.04:LTS | qemu | 1:2.11+dfsg-1ubuntu7.32 |
| Ubuntu · 20.04 LTS 20.04:LTS | qemu | 1:4.2-3ubuntu6.6 |
Vulnerabilities 1
-
Unscored —CVE-2020-14364 Public exploit
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue …
References
-
report
https://ubuntu.com/security/CVE-2020-14364