Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-35505

Опубликовано: 28 мая 2021
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 2.1
CVSS3: 4.4

Описание

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

РелизСтатусПримечание
bionic

released

1:2.11+dfsg-1ubuntu7.37
devel

released

1:6.0+dfsg-1~ubuntu3
esm-infra-legacy/trusty

released

2.0.0+dfsg-2ubuntu1.47+esm6
esm-infra-legacy/xenial

released

1:2.5+dfsg-5ubuntu10.51+esm4
esm-infra/bionic

released

1:2.11+dfsg-1ubuntu7.37
esm-infra/focal

released

1:4.2-3ubuntu6.17
esm-infra/xenial

ignored

end of ESM support, was needed
focal

released

1:4.2-3ubuntu6.17
groovy

released

1:5.0-5ubuntu9.9
hirsute

released

1:5.2+dfsg-9ubuntu3.1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

kinetic

DNE

Показывать по

EPSS

Процентиль: 24%
0.00317
Низкий

2.1 Low

CVSS2

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.2
redhat
больше 5 лет назад

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVSS3: 4.4
nvd
около 5 лет назад

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVSS3: 4.4
msrc
около 5 лет назад

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVSS3: 4.4
debian
около 5 лет назад

A NULL pointer dereference flaw was found in the am53c974 SCSI host bu ...

CVSS3: 4.4
github
около 4 лет назад

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

EPSS

Процентиль: 24%
0.00317
Низкий

2.1 Low

CVSS2

4.4 Medium

CVSS3