CVE-2020-25085

概要

参考情報

• openwall.com/lists/oss-security/2020/09/16/6 · Mailing List
• openwall.com/lists/oss-security/2021/03/09/1 · Mailing List
• bugs.launchpad.net/qemu/+bug/1892960 · Exploit
• lists.debian.org/debian-lts-announce/2020/11/msg00047.html · Mailing List
• lists.debian.org/debian-lts-announce/2022/09/msg00008.html · Mailing List
• lists.nongnu.org/archive/html/qemu-devel/2020-09/msg00733.html · Mailing List
• security.netapp.com/advisory/ntap-20201009-0005 · Third Party Advisory

qemu のその他の脆弱性

• CVE-2025-54567中 5.4hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
• CVE-2025-54566中 5.4hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.
• CVE-2024-7730高 7.8A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm…
• CVE-2024-3447中 6.0A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of…
• CVE-2024-3567中 5.5A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calc…