CVE-2020-27661
Fixed in a distro release EPSS <1%
A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1:5.2+dfsg-1 |
| Debian 13 | qemu | 1:5.2+dfsg-1 |
| Debian 14 | qemu | 1:5.2+dfsg-1 |