Date: Fri, 24 Apr 2020 16:43:45 +0200 From: Mauro Matteo Cascella <mcascell@...hat.com> To: oss-security@...ts.openwall.com Cc: ziming zhang <ezrakiez@...il.com> Subject: CVE-2020-11869 qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS Hello all, An integer overflow flaw was found in QEMU in the way it implemented the ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations through ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service. Upstream patch: -> https://git.qemu.org/?p=qemu.git;a=commit;h=ac2071c3791b67fc7af78b8ceb320c01ca1b5df7 This issue was reported by Ziming Zhang. CVE-2020-11869 requested via -> https://cveform.mitre.org/ Thank you, -- Mauro Matteo Cascella Product Security Engineer Red Hat <https://www.redhat.com/> <https://www.redhat.com/>
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.