CVE-2020-14364

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 24-08-2020 02:00

Last modified: - 24-08-2020 02:00

Total changes: - 13

Description

CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

High

Attack complexity

Local

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

High

Privileges required

Changed

Scope

None

User interaction

5.0

Base score

Exploitability score

Impact score

Verification logic

AND

product=virt AND versionEndExcluding=8.1-8010120200911011910.5db1954d

vendor=Red Hat Enterprise Linux AND product=advanced_virtualization AND version=8.1

AND

product=virt-devel AND versionEndExcluding=8.1-8010120200911011910.5db1954d

vendor=Red Hat Enterprise Linux AND product=advanced_virtualization AND version=8.1

AND

product=virt AND versionEndExcluding=8.2-8020120200909235106.863bb0db

vendor=Red Hat Enterprise Linux AND product=advanced_virtualization AND version=8.2

AND

product=virt-devel AND versionEndExcluding=8.2-8020120200909235106.863bb0db

vendor=Red Hat Enterprise Linux AND product=advanced_virtualization AND version=8.2

AND

product=qemu-kvm-2 AND versionEndExcluding=0.12.1.2-2.506.el6_10.8

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=qemu-kvm-2 AND versionEndExcluding=0.12.1.2-2.415.el6_5.21

vendor=Red Hat Enterprise Linux AND product=rhel_aus AND version=6.5

AND

product=qemu-kvm-2 AND versionEndExcluding=0.12.1.2-2.448.el6_6.9

vendor=Red Hat Enterprise Linux AND product=rhel_aus AND version=6.6

AND

product=qemu-kvm-ma-10 AND versionEndExcluding=2.12.0-48.el7_9.1

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-175.el7_9.1

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-105.el7_2.20

vendor=Red Hat Enterprise Linux AND product=rhel_aus AND version=7.2

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-126.el7_3.18

vendor=Red Hat Enterprise Linux AND product=rhel_aus AND version=7.3

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-126.el7_3.18

vendor=Red Hat Enterprise Linux AND product=rhel_tus AND version=7.3

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-126.el7_3.18

vendor=Red Hat Enterprise Linux AND product=rhel_e4s AND version=7.3

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-141.el7_4.11

vendor=Red Hat Enterprise Linux AND product=rhel_aus AND version=7.4

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-141.el7_4.11

vendor=Red Hat Enterprise Linux AND product=rhel_tus AND version=7.4

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-141.el7_4.11

vendor=Red Hat Enterprise Linux AND product=rhel_e4s AND version=7.4

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-160.el7_6.8

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=7.6

AND

product=qemu-kvm-ma-10 AND versionEndExcluding=2.12.0-18.el7_6.7

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=7.6

AND

product=qemu-kvm-ma-10 AND versionEndExcluding=2.12.0-33.el7_7.4

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=7.7

AND

product=qemu-kvm-10 AND versionEndExcluding=1.5.3-167.el7_7.7

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=7.7

AND

product=virt-devel AND versionEndExcluding=rhel-8020020200909224913.4cda2c84

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=8

AND

product=virt AND versionEndExcluding=rhel-8020020200909224913.4cda2c84

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=8

AND

product=virt AND versionEndExcluding=rhel-8000020200910175113.f8e95b4e

vendor=Red Hat Enterprise Linux AND product=rhel_e4s AND version=8.0

AND

product=virt-devel AND versionEndExcluding=rhel-8010020200917181121.c27ad7f8

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=8.1

AND

product=virt AND versionEndExcluding=rhel-8010020200917181121.c27ad7f8

vendor=Red Hat Enterprise Linux AND product=rhel_eus AND version=8.1

AND

product=qemu-kvm-rhev-10 AND versionEndExcluding=2.12.0-33.el7_7.12

vendor=Red Hat Enterprise Linux AND product=openstack AND version=10

AND

product=qemu-kvm-rhev-10 AND versionEndExcluding=2.12.0-48.el7_9.1

vendor=Red Hat Enterprise Linux AND product=openstack AND version=13

AND

product=qemu-kvm-rhev-10 AND versionEndExcluding=2.12.0-18.el7_6.12

vendor=Red Hat Enterprise Linux AND product=openstack AND version=13

AND

product=qemu-kvm-rhev-10 AND versionEndExcluding=2.12.0-48.el7_9.1

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=redhat-virtualization-host-0 AND versionEndExcluding=4.3.11-20200922.0.el7_9

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=redhat-virtualization-host-0 AND versionEndExcluding=4.4.2-20200930.0.el8_2

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=8

AND

product=qemu-kvm-rhev-10 AND versionEndExcluding=2.12.0-48.el7_9.1

vendor=Red Hat Enterprise Linux AND product=rhev_manager AND version=4.3

AND

product=kvm AND version=

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=5

AND

product=xen AND version=

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=5

AND

product=qemu-kvm AND version=

vendor=Red Hat Enterprise Linux AND product=advanced_virtualization AND version=8

Reference

Keywords

CVE-2020-14364

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

REDHAT

CVE-2020-14364

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures