Input validation error in QEMU - CVE-2020-24165

Vulnerability identifier: #VU85832

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-24165

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in TCG Accelerator. A local user can escalate privileges on the system.

QEMU
openEuler
Ubuntu
qemu-block-iscsi
qemu-seabios
qemu-help
qemu-block-ssh
qemu-img
qemu-guest-agent
qemu-block-curl
qemu-debugsource
qemu-block-rbd
qemu-debuginfo
qemu
qemu-system-x86 (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-x86-xen (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-xen (Ubuntu package)

Install updates from vendor's website.

QEMU - update to 4.2.1
qemu-block-iscsi - addressed in versions 4.1.0-76, 4.1.0-80
qemu-seabios - addressed in versions 4.1.0-76, 4.1.0-80
qemu-help - addressed in versions 4.1.0-76, 4.1.0-80
qemu-block-ssh - addressed in versions 4.1.0-76, 4.1.0-80
qemu-img - addressed in versions 4.1.0-76, 4.1.0-80
qemu-guest-agent - addressed in versions 4.1.0-76, 4.1.0-80
qemu-block-curl - addressed in versions 4.1.0-76, 4.1.0-80
qemu-debugsource - addressed in versions 4.1.0-76, 4.1.0-80
qemu-block-rbd - addressed in versions 4.1.0-76, 4.1.0-80
qemu-debuginfo - addressed in versions 4.1.0-76, 4.1.0-80
qemu - addressed in versions 4.1.0-76, 4.1.0-80
qemu-system-x86 (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21
qemu (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:6.2+dfsg-2ubuntu6.16
qemu-system-arm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-ppc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-mips (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-sparc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-misc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-xen (Ubuntu package) - addressed in versions 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2

• https://bugs.launchpad.net/qemu/+bug/1863025
• https://pastebin.com/iqCbjdT8
• https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html
• https://security.netapp.com/advisory/ntap-20231006-0012/

• Ubuntu update for qemu
• openEuler 20.03 LTS SP1 update for qemu
• openEuler 20.03 LTS SP3 update for qemu
• Ubuntu update for qemu