VDB

CVE-2020-14364

CVE-2020-14364 PUBLISHED

Reported by redhat · Published August 31, 2020

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Affected products

VendorProductVersions
n/aQEMUQEMU versions before 5.2.0
n/aQEMU5.2.0
amazon:2qemu-audio-sdl0
amazon:2qemu-audio-pa0
amazon:2qemu-audio-alsa0
amazon:2qemu-block-nfs0
amazon:2qemu-block-curl0
amazon:2qemu-block-rbd0
amazon:2qemu-kvm0
amazon:2qemu-block-ssh0
amazon:2qemu-system-aarch64-core0
amazon:2qemu-img0
amazon:2qemu0
amazon:2qemu-guest-agent0
amazon:2qemu-ui-curses0
amazon:2qemu-user0
amazon:2qemu-ui-gtk0
amazon:2ivshmem-tools0
amazon:2qemu-system-x86-core0
amazon:2qemu-ui-sdl0

…and 10 more

Timeline

  • Aug 24, 2020 CVE Published
  • Apr 14, 2021 EPSS Score (30 in total, the first dated here)
  • Sep 8, 2025 CVE Updated
  • Mar 6, 2026 Distribution Patch (24 in total, the first dated here)
  • Mar 6, 2026 Security Advisory (32 in total, the first dated here)
  • Sep 5, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2020-14364
vulnetix vdb fixes CVE-2020-14364

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2020-14364/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›