CVE-2020-13361 PUBLISHED

In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.

EPSS 0.10% · 26.9th percentile

Risk Scores

EPSS Score
0.10%
26.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSqemu0, 1.5.0+dfsg-3ubuntu5, 1.5.0+dfsg-3ubuntu6
Ubuntu:18.04:LTSqemu1:2.11+dfsg-1ubuntu2, 0, 1:2.10+dfsg-0ubuntu3
Ubuntu:20.04:LTSqemu0, 1:4.0+dfsg-0ubuntu9, 1:4.0+dfsg-0ubuntu10
Ubuntu:16.04:LTSqemu1:2.5+dfsg-5ubuntu10.40, 1:2.5+dfsg-5ubuntu10.41, 1:2.5+dfsg-5ubuntu10.42

Timeline

References

Open in Interactive Console →