How severe is CVE-2020-15863?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.3 out of 10.

What type of vulnerability is CVE-2020-15863?

This is classified as CWE-787, which is a common weakness in software security.

CVE-2020-15863 - MEDIUM Severity | CVSS 5.3

Vulnerability Description

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

Related Vulnerabilities

CVE-2013-7491

MEDIUM

CVSS:5.3(Medium)

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.

CWE-7872013

CVE-2017-17286

MEDIUM

CVSS:5.3(Medium)

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, ...

CWE-7872017

CVE-2017-3630

MEDIUM

CVSS:5.3(Medium)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low priv...

CWE-7872017

CVE-2018-0981

MEDIUM

CVSS:5.3(Medium)

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This af...

CWE-7872018

CVE-2018-1000

MEDIUM

CVSS:5.3(Medium)

CWE-7872018

CVE-2018-7517

MEDIUM

CVSS:5.3(Medium)

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability.

CWE-7872018