CVE-2020-27661
Description
A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
References
PatchThird Party Advisory
Mailing ListPatchThird Party Advisory
Issue TrackingPatchThird Party Advisory
PatchVendor Advisory
CvssV3 impact
BaseSeverity | MEDIUM |
ConfidentialityImpact | NONE |
AttackComplexity | LOW |
Scope | CHANGED |
AttackVector | LOCAL |
AvailabilityImpact | HIGH |
IntegrityImpact | NONE |
PrivilegesRequired | LOW |
BaseScore | 6.5 |
VectorString | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
Version | 3.1 |
UserInteraction | NONE |
CvssV2 impact
AccessComplexity | LOW |
ConfidentialityImpact | NONE |
AvailabilityImpact | PARTIAL |
IntegrityImpact | NONE |
BaseScore | 2.1 |
VectorString | AV:L/AC:L/Au:N/C:N/I:N/A:P |
Version | 2.0 |
AccessVector | LOCAL |
Authentication | NONE |