Skip to content
Multiple QEMU Vulnerabilities Affecting Ubuntu Systems

Multiple QEMU Vulnerabilities Affecting Ubuntu Systems

First seen 9 Jun 2026, 20:20 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 10, 2026 at 20:17 UTC
  • •QEMU vulnerabilities affect Ubuntu versions 14.04 to 20.04 LTS.
  • •Denial of service and arbitrary code execution risks are present.
  • •Immediate updates are recommended for affected systems.

On June 9, 2026, Ubuntu announced several vulnerabilities in QEMU affecting versions 14.04 LTS to 20.04 LTS. The vulnerabilities include denial of service risks and potential arbitrary code execution due to improper handling of iSCSI responses (CVE-2020-1711) and memory operations (CVE-2020-11947). The issues primarily affect Ubuntu 14.04 LTS, with additional impacts on 16.04 LTS, 18.04 LTS, and 20.04 LTS. Attackers could exploit these vulnerabilities remotely or locally, leading to crashes and information exposure. The recommended action is to update to the latest package versions available through Ubuntu Pro. The vulnerabilities were discovered by multiple researchers, including Felipe Franciosi and Ziming Zhang.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 136d ago How this analysis works

Timeline

2020-02-11
CVE-2020-1711 published
Vulnerability in iSCSI block driver allows remote attackers to cause denial of service or execute code.
Ubuntu
2020-07-02
CVE-2020-15469 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2020-07-21
CVE-2020-15859 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2020-07-28
CVE-2020-15863 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2020-08-31
CVE-2020-12829 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2020-09-25
CVE-2020-25625 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2020-09-25
CVE-2020-25084 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2020-11-06
CVE-2020-27617 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2020-11-30
CVE-2020-25624 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2020-12-02
CVE-2020-25723 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (5)

Following this threat?

Track Ubuntu and CVE-2020-11947 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (44)

1 / 3