CVE-2020-13362

Name of the Vulnerable Software and Affected Versions QEMU versions 5.0.0 and earlier QEMU versions 4.2.0

Description The issue is related to an out-of-bounds read in the megasas lookup frame function in hw/scsi/megasas.c. This can be triggered via a crafted reply queue head field from a guest OS user, potentially leading to a denial of service.

Recommendations For QEMU versions 5.0.0 and earlier, update to a version later than 5.0.0 to resolve the issue. For QEMU version 4.2.0, update to a version later than 4.2.0 to resolve the issue. As a temporary workaround, consider restricting access to the megasas lookup frame function in hw/scsi/megasas.c to minimize the risk of exploitation.