CVE-2020-11102
Fixed in a distro release EPSS 2%
hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1:4.2-4 |
| Debian 13 | qemu | 1:4.2-4 |
| Debian 14 | qemu | 1:4.2-4 |
| openSUSE Tumbleweed | qemu | 6.1.0-32.1 |