CVE-2020-24165
Fixed in a distro release EPSS <1%
An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug and not a valid security issue by multiple third parties.
Products: qemu, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | qemu | 1:3.1+dfsg-8+deb10u11 |
| Debian 12 | qemu | 1:5.0-1 |
| Debian 13 | qemu | 1:5.0-1 |
| Debian 14 | qemu | 1:5.0-1 |
| Ubuntu 20.04 LTS | qemu | 1:4.2-3ubuntu6.28 |
| Ubuntu 22.04 LTS | qemu | 1:6.2+dfsg-2ubuntu6.16 |