SecuritySpace - CVE-2020-17380

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2020-17380

Description: A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.

Test IDs: 1.3.6.1.4.1.25623.1.1.4.2022.3594.1 1.3.6.1.4.1.25623.1.1.2.2021.2125 1.3.6.1.4.1.25623.1.1.4.2022.3768.1 1.3.6.1.4.1.25623.1.1.2.2021.2046

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-17380
https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html
http://www.openwall.com/lists/oss-security/2021/03/09/1

CVE ID:	CVE-2020-17380
Description:	A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2022.3594.1 1.3.6.1.4.1.25623.1.1.2.2021.2125 1.3.6.1.4.1.25623.1.1.4.2022.3768.1 1.3.6.1.4.1.25623.1.1.2.2021.2046
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-17380 https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html http://www.openwall.com/lists/oss-security/2021/03/09/1