An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug and not a valid security issue by multiple third parties.
References
| Link | Resource |
|---|---|
| https://bugs.launchpad.net/qemu/+bug/1863025 | Issue Tracking |
| https://pastebin.com/iqCbjdT8 | Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html | Mailing List Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20231006-0012/ | Third Party Advisory |
Configurations
History
14 May 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug and not a valid security issue by multiple third parties. |
13 Oct 2023, 01:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:a:qemu:qemu:4.2.0:-:*:*:*:*:*:* |
|
| References |
|
|
| References | (MISC) https://bugs.launchpad.net/qemu/+bug/1863025 - Issue Tracking | |
| References | (MISC) https://pastebin.com/iqCbjdT8 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Qemu qemu
Qemu Debian Debian debian Linux |
28 Aug 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-28 21:15
Updated : 2024-08-04 15:16
NVD link : CVE-2020-24165
Mitre link : CVE-2020-24165
JSON object : View
Products Affected
debian
- debian_linux
qemu
- qemu
CWE