CVE-2020-25743

Опубликовано: 06 окт. 2020

Источник: nvd

CVSS3: 3.2

CVSS2: 2.1

EPSS Низкий

Описание

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.

Ссылки

http://www.openwall.com/lists/oss-security/2020/09/29/1
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1881409
Issue Tracking
Patch
Third Party Advisory
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05967.html
Patch
Third Party Advisory
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Fide_nullptr1b
Broken Link
http://www.openwall.com/lists/oss-security/2020/09/29/1
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1881409
Issue Tracking
Patch
Third Party Advisory
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05967.html
Patch
Third Party Advisory
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Fide_nullptr1b
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 5.1.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*

EPSS

Процентиль: 38%

0.00467

Низкий

3.2 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2020-25743

CVSS3: 3.2

ubuntu

почти 6 лет назад

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.

CVE-2020-25743

CVSS3: 3.2

redhat

около 6 лет назад

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.

CVE-2020-25743

CVSS3: 3.2

msrc

почти 6 лет назад

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.

CVE-2020-25743

CVSS3: 3.2

debian

почти 6 лет назад

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereferen ...

GHSA-qgc2-rv3v-hg6j

github

около 4 лет назад

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.

EPSS

Процентиль: 38%

0.00467

Низкий

3.2 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476