CVE-2020-27821CWE-787

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache

published December 8, 2020

CVSS
—
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2020-12-08T21:33Z
EPSS history
Timeline
  • 08 DEC 21:33Z
    A flaw was found in the memory management API of QEMU during the initialization of a memory region cache
    cvelistv5