CVE-2020-27821 log

Source
Severity Medium
Remote No
Type Denial of service
Description
A heap buffer overflow was found in the Message Signaled Interrupt (MSI-X) device support of QEMU. The overflow could occur due to an out-of-bounds write of the MSIX table while performing MSI-X mmio operations in msix_table_mmio_write(). A guest user may exploit this flaw to crash the QEMU process on the host, resulting in a denial of service condition.
Group Package Affected Fixed Severity Status Ticket
AVG-1308 qemu 5.2.0-4 6.0.0-1 Medium Fixed
References
https://www.openwall.com/lists/oss-security/2020/12/16/6
https://bugzilla.redhat.com/show_bug.cgi?id=1902651
https://git.qemu.org/?p=qemu.git;a=commitdiff;h=4bfb024bc76973d40a359476dc0291f46e435442