| Severity |
|
| Remote |
|
| Type |
| - |
Unknown |
| + |
Directory traversal |
|
| Description |
| + |
An out-of-bounds read access issue was found in the ATAPI Emulator of QEMU. It occurs while processing ATAPI read command if logical block address(LBA) is set an invalid value. A guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario. |
|
| References |
| + |
https://bugzilla.redhat.com/show_bug.cgi?id=1917446 |
| + |
https://git.qemu.org/?p=qemu.git;a=commitdiff;h=813212288970c39b1800f63e83ac6e96588095c6 |
| + |
https://lists.gnu.org/archive/html/qemu-devel/2021-01/msg04255.html |
|