CVE-2020-13800

Name of the Vulnerable Software and Affected Versions QEMU version 4.2.0

Description The issue is related to the ati-vga component in the QEMU hardware emulator, which is vulnerable to uncontrolled recursion. This can be triggered by a crafted mm index value during an ati mm read or ati mm write call, potentially allowing an attacker to cause a denial of service.

Recommendations For QEMU version 4.2.0, as a temporary workaround, consider disabling the ati-vga component to minimize the risk of exploitation. Restrict access to the ati mm read and ati mm write functions until a patch is available. Avoid using the mm index variable in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.