提交 #6168: CVE-2020-29443 // Denial of Service in QEMU

An out-of-bounds read access issue was found in the ATAPI Emulator of QEMU. It occurs while processing ATAPI read command if logical block address(LBA) is set an invalid value. A guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

• 来源: ⚠️ https://bugzilla.redhat.com/show_bug.cgi?id=1917446
• 用户: CSieberg (UID 13359)
• 提交: 2021-01-20 07時15分 (6 年前)
• 管理: 2021-01-20 07時50分 (35 minutes later)
• 状态: 已接受
• VulDB条目: 168123 [QEMU ATAPI Emulator 信息公开]
• 积分: 14