Your submission was sent successfully! Close

CVE-2020-13659

Published: 2 June 2020

address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.

Priority

Low

CVSS 3 base score: 2.5

Status

Package Release Status
qemu
Launchpad, Ubuntu, Debian
bionic
Released (1:2.11+dfsg-1ubuntu7.31)
eoan Ignored
(reached end-of-life)
focal
Released (1:4.2-3ubuntu6.4)
groovy Not vulnerable
(1:5.0-5ubuntu4)
hirsute Not vulnerable
(1:5.0-5ubuntu4)
precise Does not exist

trusty
Released (2.0.0+dfsg-2ubuntu1.47+esm1)
upstream Needs triage

xenial
Released (1:2.5+dfsg-5ubuntu10.45)
Patches:
upstream: https://git.qemu.org/?p=qemu.git;a=commit;h=77f55eac6c433e23e82a1b88b2d74f385c4c7d82
qemu-kvm
Launchpad, Ubuntu, Debian
bionic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

precise Ignored
(end of ESM support, was needs-triage)
trusty Does not exist

upstream Needs triage

xenial Does not exist