CVE-2020-13253
Fixed in a distro release EPSS <1%
sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS user can crash the QEMU process.
Products: qemu, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | qemu | 1:3.1+dfsg-8+deb10u9 |
| Debian 12 | qemu | 1:5.0-8 |
| Debian 13 | qemu | 1:5.0-8 |
| Debian 14 | qemu | 1:5.0-8 |
| Debian 9 | qemu | 1:2.8+dfsg-6+deb9u11 |
| SUSE Linux Enterprise Micro 5.0 | qemu | 4.2.1-11.34.2 |
| SUSE Linux Enterprise Real Time 15 SP2 | qemu | 4.2.1-11.34.2 |
| SUSE Linux Enterprise Server 12 SP5 | qemu | 3.1.1.1-66.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | qemu | 3.1.1.1-66.1 |
| Ubuntu 16.04 LTS | qemu | 1:2.5+dfsg-5ubuntu10.45 |
| Ubuntu 18.04 LTS | qemu | 1:2.11+dfsg-1ubuntu7.31 |
| Ubuntu 20.04 LTS | qemu | 1:4.2-3ubuntu6.4 |
| Ubuntu Pro 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.47+esm1 |
| openSUSE Leap 15.3 | qemu | 4.2.1-11.34.2 |