CVE-2020-25624 : hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values ob

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.

Published 2020-11-30 07:15:11

Updated 2022-09-23 15:27:53

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2020-25624

Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Qemu » Qemu » Version: 5.0.0
cpe:2.3:a:qemu:qemu:5.0.0:-:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 14 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P	3.4	6.4	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
5.0	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L	0.8	3.7	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: Low Integrity: Low Availability: Low

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html

[SECURITY] [DLA 3099-1] qemu security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05492.html

[PATCH v2 1/2] hw: usb: hcd-ohci: check len and frame_number variables
Exploit;Mailing List;Patch;Third Party Advisory
https://security.netapp.com/advisory/ntap-20201210-0005/

CVE-2020-25624 QEMU Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory

Jump to