Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-4145

Опубликовано: 25 янв. 2022
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.9
CVSS3: 6.5

Описание

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data reaches the threshold of mirroring node.

РелизСтатусПримечание
bionic

not-affected

code not present
devel

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
esm-infra/xenial

not-affected

code not present
focal

not-affected

code not present
hirsute

not-affected

code not present
impish

not-affected

code not present
jammy

not-affected

code not present

Показывать по

Ссылки на источники

EPSS

Процентиль: 8%
0.00034
Низкий

4.9 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.6
redhat
больше 3 лет назад

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data reaches the threshold of mirroring node.

CVSS3: 6.5
nvd
больше 3 лет назад

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data reaches the threshold of mirroring node.

msrc
больше 2 лет назад

Описание отсутствует

CVSS3: 6.5
debian
больше 3 лет назад

A NULL pointer dereference issue was found in the block mirror layer o ...

CVSS3: 6.5
github
больше 3 лет назад

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data reaches the threshold of mirroring node.

EPSS

Процентиль: 8%
0.00034
Низкий

4.9 Medium

CVSS2

6.5 Medium

CVSS3