Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-27616

Fixed in a distro release EPSS 3%

ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.

Published 2020-11-06 · CVE record · OSV

Products: qemu

Distro releases

ReleasePackageFixed in
Debian 12qemu1:5.2+dfsg-1
Debian 13qemu1:5.2+dfsg-1
Debian 14qemu1:5.2+dfsg-1
SUSE Linux Enterprise Micro 5.0qemu4.2.1-11.16.3
SUSE Linux Enterprise Module for Basesystem 15 SP2qemu4.2.1-11.16.3
SUSE Linux Enterprise Module for Server Applications 15 SP2qemu4.2.1-11.16.3
Ubuntu 16.04 LTSqemu1:2.5+dfsg-5ubuntu10.48
Ubuntu 18.04 LTSqemu1:2.11+dfsg-1ubuntu7.34
Ubuntu 20.04 LTSqemu1:4.2-3ubuntu6.10
openSUSE Leap 15.2qemu4.2.1-lp152.9.12.1
openSUSE Leap 15.2qemu-linux-user4.2.1-lp152.9.12.1
openSUSE Leap 15.2qemu-testsuite4.2.1-lp152.9.12.1