Vulnerabilities > CVE-2020-15859 - Use After Free vulnerability in multiple products

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
local
low complexity
qemu
debian
CWE-416
NVD
Published: 2020-07-21
Updated: 2022-09-23

Summary

QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.

Vulnerable Configurations

Part Description Count
Application
Qemu
1
OS
Debian
2

Common Weakness Enumeration (CWE)

References