Security Advisory

CVE-2020-17380

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-30 05:38:01

Last updated 2024-08-04 13:53:16

Assigner mitre

State PUBLISHED

Description

A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.

← Browse all CVEs View on cve.org ↗