Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-25741

Опубликовано: 24 июн. 2020
Источник: redhat
CVSS3: 3.2

Описание

fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.

A NULL pointer dereference flaw was found in the Floppy disk emulator of QEMU. This issue occurs while transferring data via the fdctrl_read_data() and fdctrl_write_data() routines if the current drive has a null block pointer. This flaw allows a guest user to crash the QEMU process on the host, resulting in a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kvmNot affected
Red Hat Enterprise Linux 5xenNot affected
Red Hat Enterprise Linux 6qemu-kvmNot affected
Red Hat Enterprise Linux 7qemu-kvmNot affected
Red Hat Enterprise Linux 7qemu-kvm-maNot affected
Red Hat Enterprise Linux 7qemu-kvm-rhevFix deferred
Red Hat Enterprise Linux 8qemu-kvmFix deferred
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:8.2/qemu-kvmWill not fix
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:8.3/qemu-kvmAffected
Red Hat Enterprise Linux 9qemu-kvmAffected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1881401QEMU: fdc: null pointer dereference during r/w data transfer

3.2 Low

CVSS3

Связанные уязвимости

CVSS3: 3.2
ubuntu
больше 5 лет назад

fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.

CVSS3: 3.2
nvd
больше 5 лет назад

fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.

CVSS3: 3.2
debian
больше 5 лет назад

fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer d ...

github
больше 3 лет назад

fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.

3.2 Low

CVSS3