Vulnerability Details CVE-2020-11947
iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.4%
CVSS Severity
CVSS v3 Score 3.8
CVSS v2 Score 2.1
References
- http://www.openwall.com/lists/oss-security/2021/01/13/4
- https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5
- https://security.netapp.com/advisory/ntap-20210212-0001/
- http://www.openwall.com/lists/oss-security/2021/01/13/4
- https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5
- https://security.netapp.com/advisory/ntap-20210212-0001/