Medium severity6.0NVD Advisory· Published Jun 4, 2020· Updated Jun 17, 2026
CVE-2020-13800
CVE-2020-13800
Description
ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
- QEMU/QEMUdescription
- osv-coords6 versionspkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/qemu&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/qemu-linux-user&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/qemu-testsuite&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2
< 4.2.1-lp152.9.3.1+ 5 more
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 6.1.0-32.1
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 4.2.1-lp152.9.3.1
- (no CPE)range: < 4.2.1-11.4.4
- (no CPE)range: < 4.2.1-11.4.4
Patches
Vulnerability mechanics
References
7- lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.htmlnvdMailing ListThird Party Advisory
- lists.gnu.org/archive/html/qemu-devel/2020-06/msg00825.htmlnvdMailing ListVendor Advisory
- security.gentoo.org/glsa/202011-09nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20200717-0001/nvdThird Party Advisory
- usn.ubuntu.com/4467-1/nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2020/06/04/2nvdMailing ListThird Party Advisory
- cve.openeuler.org/cvenvdBroken Link
News mentions
0No linked articles in our index yet.