CVE-2020-27616: Medium severity Qemu Qemu vulnerability
ati2dblt in hw/display/ati2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:5.2+dfsg-11+deb11u3Fixed in 1:5.2+dfsg-11+deb11u2Fixed in 1:7.2+dfsg-7+deb12u7Fixed in 1:9.0.2+ds-2Fixed in 1:9.1.0+ds-2 - Upgrade
Upgrade
alpine/qemuto a version that resolves this vulnerability.Fixed in 5.0.0-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27616?
CVE-2020-27616 is rated as a medium severity vulnerability due to its potential to crash the QEMU process.
How do I fix CVE-2020-27616?
To mitigate CVE-2020-27616, update QEMU to a version later than 4.2.1 that addresses this vulnerability.
What software is affected by CVE-2020-27616?
CVE-2020-27616 affects QEMU version 4.2.1 and several specific Debian package versions.
Can CVE-2020-27616 be exploited remotely?
Yes, CVE-2020-27616 can be exploited by a guest to crash the QEMU process.
What systems should I check for CVE-2020-27616?
Check any systems running QEMU version 4.2.1 or specific Debian package versions for CVE-2020-27616.