CVE-2020-13362
QEMU: megasas: OOB read access due to invalid index leads to DoS
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 7, 2020
Updated · June 28, 2026
Description
An out-of bounds read-access flaw was found in the MegaRAID SAS 8708EM2 emulator of the QEMU. This flaw occurs in the' megasas_lookup_frame' routine when the 's->reply_queue_head' is set to a malicious value. A guest user or process may use this flaw to crash the QEMU process on the host resulting in a denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
CWE-125 · Out-of-bounds Read