Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-25723

Опубликовано: 02 дек. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 2.1
CVSS3: 3.2

Описание

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

РелизСтатусПримечание
bionic

released

1:2.11+dfsg-1ubuntu7.34
devel

released

1:5.2+dfsg-2ubuntu1
esm-infra-legacy/trusty

needed

esm-infra/bionic

not-affected

1:2.11+dfsg-1ubuntu7.34
esm-infra/focal

not-affected

1:4.2-3ubuntu6.10
esm-infra/xenial

not-affected

1:2.5+dfsg-5ubuntu10.48
focal

released

1:4.2-3ubuntu6.10
groovy

released

1:5.0-5ubuntu9.2
hirsute

released

1:5.2+dfsg-2ubuntu1
impish

released

1:5.2+dfsg-2ubuntu1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

EPSS

Процентиль: 2%
0.00016
Низкий

2.1 Low

CVSS2

3.2 Low

CVSS3

Связанные уязвимости

CVSS3: 3.2
redhat
почти 5 лет назад

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

CVSS3: 3.2
nvd
больше 4 лет назад

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

CVSS3: 3.2
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 3.2
debian
больше 4 лет назад

A reachable assertion issue was found in the USB EHCI emulation code o ...

CVSS3: 3.2
github
около 3 лет назад

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

EPSS

Процентиль: 2%
0.00016
Низкий

2.1 Low

CVSS2

3.2 Low

CVSS3