CVE-2020-29443 QEMU: ide: atapi: OOB access while processing read commands

[P J P <ppandit () redhat com>]

  Hello,

An out-of-bounds read access issue was found in the ATAPI Emulator of QEMU. It 
occurs while processing ATAPI read command if logical block address(LBA) is 
set to an invalid value. A guest user may use this flaw to crash the QEMU 
process on the host resulting in DoS scenario.

Upstream patch:
---------------
  -> https://lists.gnu.org/archive/html/qemu-devel/2021-01/msg04255.html
  -> https://git.qemu.org/?p=qemu.git;a=commit;h=813212288970c39b1800f63e83ac6e96588095c6

This issue was reported by Wenxiang Qian of Tencent Blade Team.

Thank you.
--
Prasad J Pandit / Red Hat Product Security Team
8685 545E B54C 486B C6EB 271E E285 8B5A F050 DE8D