{"action":"Upgrade qemu to 1:4.2-7 or later.","affected":[{"fixed":"1:4.2-7","introduced":"0"}],"component":"qemu","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1:4.2-7"],"id":"tcs_01M5NEGVNG77WM14CFNDTJ0BGG","modified_at":"2026-10-26T12:01:24.479166241Z","published_at":"2020-12-31T01:15:12.473Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-11947","https://security-tracker.debian.org/tracker/CVE-2020-11947"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-11947","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-11947"}],"summary":"iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker."}