CVE-2020-11947 | QEMU 4.1.0 block/iscsi.c iscsi_aio_ioctl_cb heap-based overflow (Nessus ID 209571)
A vulnerability, which was classified as problematic, was found in QEMU 4.1.0. Affected is the function iscsi_aio_ioctl_cb of the file block/iscsi.c. The manipulation leads to heap-based buffer overflow.
This vulnerability is traded as CVE-2020-11947. The attack needs to be approached within the local network. There is no exploit available.
It is recommended to apply a patch to fix this issue.