[USN-4511-1] QEMU vulnerability

 ---------- Forwarded message ---------

From: Marc Deslauriers <marc.deslauriers@canonical.com>

Date: Sep 17, 2020 8:16PM

Ziming Zhang, Xiao Wei, Gonglei Arei, and Yanyu Zhang discovered that QEMU

incorrectly handled certain USB packets. An attacker inside the guest could

use this issue to cause QEMU to crash, resulting in a denial of service, or

possibly execute arbitrary code on the host. In the default installation,

when QEMU is used with libvirt, attackers would be isolated by the libvirt

AppArmor profile.

References:

  https://usn.ubuntu.com/4511-1

  CVE-2020-14364