What is the severity of CVE-2020-13791?

CVE-2020-13791 has been classified with high severity due to potential out-of-bounds access vulnerabilities.

How do I fix CVE-2020-13791?

To fix CVE-2020-13791, upgrade to the latest patched version of QEMU available for your distribution.

Which versions of QEMU are affected by CVE-2020-13791?

CVE-2020-13791 affects QEMU versions prior to 5.0.1, including 4.2.0.

What kind of attack can exploit CVE-2020-13791?

CVE-2020-13791 can be exploited by guest OS users to trigger an out-of-bounds access, potentially leading to denial of service or code execution.

Is CVE-2020-13791 present in the Debian qemu package?

Yes, CVE-2020-13791 is present in several versions of the Debian qemu package prior to the fixed releases.

Vulnerability/
CVE-2020-13791

medium

5.5

CWE

125

4/6/2020

4/8/2024

CVE-2020-13791

First published: Thu Jun 04 2020(Updated: )

hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
debian/qemu		1:3.1+dfsg-8+deb10u8 1:3.1+dfsg-8+deb10u11 1:5.2+dfsg-11+deb11u3 1:5.2+dfsg-11+deb11u2 1:7.2+dfsg-7+deb12u3 1:8.1.2+ds-1 1:8.2.0+ds-1
QEMU KVM	<=5.0.1

Remedy

https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg00706.html

Remedy

https://www.openwall.com/lists/oss-security/2020/06/04/1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2020-13791?
CVE-2020-13791 has been classified with high severity due to potential out-of-bounds access vulnerabilities.
How do I fix CVE-2020-13791?
To fix CVE-2020-13791, upgrade to the latest patched version of QEMU available for your distribution.
Which versions of QEMU are affected by CVE-2020-13791?
CVE-2020-13791 affects QEMU versions prior to 5.0.1, including 4.2.0.
What kind of attack can exploit CVE-2020-13791?
CVE-2020-13791 can be exploited by guest OS users to trigger an out-of-bounds access, potentially leading to denial of service or code execution.
Is CVE-2020-13791 present in the Debian qemu package?
Yes, CVE-2020-13791 is present in several versions of the Debian qemu package prior to the fixed releases.

collector/security-tracker-debian
agent/references
agent/type
agent/softwarecombine
agent/remedy
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/severity
agent/weakness
agent/description
agent/event
agent/first-publish-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
package-manager/debian
vendor/qemu
canonical/qemu kvm
version/qemu kvm/5.0.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2020-13791?
CVE-2020-13791 has been classified with high severity due to potential out-of-bounds access vulnerabilities.
How do I fix CVE-2020-13791?
To fix CVE-2020-13791, upgrade to the latest patched version of QEMU available for your distribution.
Which versions of QEMU are affected by CVE-2020-13791?
CVE-2020-13791 affects QEMU versions prior to 5.0.1, including 4.2.0.
What kind of attack can exploit CVE-2020-13791?
CVE-2020-13791 can be exploited by guest OS users to trigger an out-of-bounds access, potentially leading to denial of service or code execution.
Is CVE-2020-13791 present in the Debian qemu package?
Yes, CVE-2020-13791 is present in several versions of the Debian qemu package prior to the fixed releases.