CVE-2020-13362

low-risk
Published 2020-05-28

In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.

Do I need to act?

-
0.10% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.2/10 Low
LOCAL / LOW complexity

Affected Products (8)

Affected Vendors

Debian Canonical Qemu Opensuse

References (22)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html
Mailing List http://www.openwall.com/lists/oss-security/2020/05/28/2
Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html
Mailing List https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html
Mailing List https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html
Mailing List https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html
Third Party Advisory https://security-tracker.debian.org/tracker/CVE-2020-13362
Third Party Advisory https://security.gentoo.org/glsa/202011-09
Third Party Advisory https://security.netapp.com/advisory/ntap-20200608-0003/
Third Party Advisory https://usn.ubuntu.com/4467-1/
Third Party Advisory https://www.debian.org/security/2020/dsa-4728
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html
Mailing List http://www.openwall.com/lists/oss-security/2020/05/28/2
Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html
Mailing List https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html
Mailing List https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html
Mailing List https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html
Third Party Advisory https://security-tracker.debian.org/tracker/CVE-2020-13362
Third Party Advisory https://security.gentoo.org/glsa/202011-09
Third Party Advisory https://security.netapp.com/advisory/ntap-20200608-0003/
and 2 more references
26
/ 100
low-risk
Severity 12/34 · Low
Exploitability 0/34 · Minimal
Exposure 14/34 · Moderate