Debian 10 Buster DLA-3362-1 Moderate: QEMU Denial Of Service Flaws

debian lts

March 14, 2023

Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service, information leak, or potentially the execution of arbitrary co...

Topics Covered

security advisory denial of service information leak Debian arbitrary code execution update recommendation QEMU

Summary

CVE-2020-14394

An infinite loop flaw was found in the USB xHCI controller
emulation of QEMU while computing the length of the Transfer
Request Block (TRB) Ring. This flaw allows a privileged guest user
to hang the QEMU process on the host, resulting in a denial of
service.

CVE-2020-17380/CVE-2021-3409

A heap-based buffer overflow was found in QEMU in the SDHCI device
emulation support. It could occur while doing a multi block SDMA
transfer via the sdhci_sdma_transfer_multi_blocks() routine in
hw/sd/sdhci.c. A guest user or process could use this flaw to
crash the QEMU process on the host, resulting in a denial of
service condition, or potentially execute arbitrary code with
privileges of the QEMU process on the host.

CVE-2020-29130

slirp.c has a buffer over-read because it tries to read a certain
amount of header data even if that exceeds the total packet
length.

CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP