CVE-2020-24165

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-28 · updated 2026-06-17

Description

An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug and not a valid security issue by multiple third parties.

Affected products

Debian Linux: 10.0
QEMU: 4.2.0

References

https://bugs.launchpad.net/qemu/+bug/1863025
https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html
https://pastebin.com/iqCbjdT8
https://security.netapp.com/advisory/ntap-20231006-0012/
https://bugs.launchpad.net/qemu/+bug/1863025
https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html
https://pastebin.com/iqCbjdT8
https://security.netapp.com/advisory/ntap-20231006-0012/

Get alerted when CVE-2020-24165 or the next vulnerability affects your stack