Test ID:	1.3.6.1.4.1.25623.1.0.113728
Category:	General
Title:	QEMU <= 5.0.0 Multiple Vulnerabilities
Summary:	QEMU is prone to multiple vulnerabilities.
Description:	Summary: QEMU is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation. (CVE-2020-13361) - megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user. (CVE-2020-13362) - There is a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c due to an assertion failure that can occur during network packet processing. (CVE-2020-16092) Affected Software/OS: QEMU through version 5.0.0. Solution: Update to version 5.1.0. CVSS Score: 3.3 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-13361 Debian Security Information: DSA-4728 (Google Search) https://www.debian.org/security/2020/dsa-4728 https://security.gentoo.org/glsa/202011-09 https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03983.html https://security-tracker.debian.org/tracker/CVE-2020-13361 https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html SuSE Security Announcement: openSUSE-SU-2020:1108 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html https://usn.ubuntu.com/4467-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-13362 https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html https://security-tracker.debian.org/tracker/CVE-2020-13362 Common Vulnerability Exposure (CVE) ID: CVE-2020-16092 Debian Security Information: DSA-4760 (Google Search) https://www.debian.org/security/2020/dsa-4760 https://security.gentoo.org/glsa/202208-27 http://www.openwall.com/lists/oss-security/2020/08/10/1 https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html SuSE Security Announcement: openSUSE-SU-2020:1664 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.