CVE-2020-27661

Description

A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.13

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-27661 are affected in QEMU 5.1.1	Windows
Multiple Vulnerabilities are affected in QEMU 5.1.1	Windows
Qemu update (ELSA-2021-9335) qemu-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-block-gluster update (ELSA-2021-9335) qemu-block-gluster-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-block-iscsi update (ELSA-2021-9335) qemu-block-iscsi-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-block-rbd update (ELSA-2021-9335) qemu-block-rbd-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-common update (ELSA-2021-9335) qemu-common-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-img update (ELSA-2021-9335) qemu-img-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-kvm update (ELSA-2021-9335) qemu-kvm-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-kvm-core update (ELSA-2021-9335) qemu-kvm-core-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-system-x86 update (ELSA-2021-9335) qemu-system-x86-4.2.1-10.el7.x86_64.rpm	Linux
Qemu-system-x86-core update (ELSA-2021-9335) qemu-system-x86-core-4.2.1-10.el7.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234