Vulnerability Name:

CVE-2020-11102 (CCN-179120)

Assigned:2020-04-06
Published:2020-04-06
Updated:2020-05-13
Summary:hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length.
CVSS v3 Severity:5.6 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
4.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
9.8 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-787
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2020-11102

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20200406 CVE-2020-11102 QEMU: tulip: OOB access in tulip_copy_tx_buffers

Source: XF
Type: UNKNOWN
qemu-cve202011102-bo(179120)

Source: CCN
Type: qemu.git Repository
net: tulip: check frame size and r/w data length

Source: MISC
Type: Mailing List, Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2020-03/msg08322.html

Source: CCN
Type: oss-sec Mailing List, Mon, 6 Apr 2020 15:50:51 +0530 (IST)
CVE-2020-11102 QEMU: tulip: OOB access in tulip_copy_tx_buffers

Source: GENTOO
Type: UNKNOWN
GLSA-202005-02

Vulnerable Configuration:Configuration 1:
  • cpe:/a:qemu:qemu:4.2.0:-:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:qemu:qemu:4.2.0:-:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:202011102
    V
    		CVE-2020-11102
    2023-06-22
    oval:org.opensuse.security:def:7791
    P
    		qemu-tools-7.1.0-150500.47.15 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:618
    P
    		Security update for python (Important) (in QA)
    2022-10-06
    oval:org.opensuse.security:def:3187
    P
    		libidn-tools-1.28-5.6.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3518
    P
    		guile-2.0.9-9.3.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:95148
    P
    		qemu-6.2.0-150400.35.10 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:94817
    P
    		qemu-tools-6.2.0-150400.35.10 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:296
    P
    		qemu-tools-5.2.0-9.18 on GA media (Moderate)
    2022-06-13
    oval:org.opensuse.security:def:351
    P
    		qemu-6.2.0-150400.35.10 on GA media (Moderate)
    2022-06-10
    oval:org.opensuse.security:def:94238
    P
    		 (Important)
    2022-05-17
    oval:org.opensuse.security:def:880
    P
    		Security update for tar (Moderate)
    2022-05-05
    oval:org.opensuse.security:def:113318
    P
    		qemu-6.1.0-32.1 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:1651
    P
    		Security update for openssh (Important)
    2021-12-22
    oval:org.opensuse.security:def:69972
    P
    		Security update for xorg-x11-server (Important)
    2021-12-14
    oval:org.opensuse.security:def:1225
    P
    		Security update for java-1_8_0-openjdk (Important)
    2021-11-23
    oval:org.opensuse.security:def:106728
    P
    		qemu-6.1.0-32.1 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:66907
    P
    		Security update for openssl-1_1 (Important)
    2021-08-24
    oval:org.opensuse.security:def:100649
    P
    		 (Moderate)
    2021-08-23
    oval:org.opensuse.security:def:2279
    P
    		qemu-5.2.0-9.18 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:101394
    P
    		qemu-5.2.0-9.18 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63368
    P
    		qemu-5.2.0-9.18 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:101072
    P
    		qemu-tools-5.2.0-9.18 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62314
    P
    		qemu-tools-5.2.0-9.18 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:72055
    P
    		qemu-tools-5.2.0-9.18 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:100951
    P
    		libpango-1_0-0-1.44.7+11-1.25 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:70263
    P
    		Security update for linuxptp (Important)
    2021-07-27
    oval:org.opensuse.security:def:69867
    P
    		Security update for ucode-intel (Important)
    2021-06-10
    oval:org.opensuse.security:def:66815
    P
    		Security update for the Linux Kernel (Important)
    2021-06-08
    oval:org.opensuse.security:def:73598
    P
    		Security update for sudo (Important)
    2021-04-20
    oval:org.opensuse.security:def:93936
    P
    		 (Moderate)
    2020-12-10
    oval:org.opensuse.security:def:107315
    P
    		qemu-tools-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:107617
    P
    		qemu-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:71710
    P
    		qemu-tools-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:116873
    P
    		qemu-tools-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63296
    P
    		qemu-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:117175
    P
    		qemu-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:2207
    P
    		qemu-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61969
    P
    		qemu-tools-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:50092
    P
    		qemu on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:66524
    P
    		libseccomp-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73189
    P
    		libnm0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73307
    P
    		qemu-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:66616
    P
    		qemu-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73480
    P
    		FastCGI on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49267
    P
    		libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49321
    P
    		qemu-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50038
    P
    		subversion-server on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:70158
    P
    		crash on GA media (Moderate)
    2020-12-01
    BACK
    qemu qemu 4.2.0
    qemu qemu 4.2.0