PT-2020-5261 · Qemu+2 · Qemu+2

Published

2020-10-06

·

Updated

2021-06-10

·

CVE-2020-25743

CVSS v3.1

3.2

Low

VectorAV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions QEMU versions prior to 5.1.1
Description The issue is related to a NULL pointer dereference in the QEMU hardware emulator. This can be triggered due to a lack of a pointer check before an ide cancel dma sync call. Exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations For versions prior to 5.1.1, update to version 5.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the hw/ide/pci.c module to minimize the risk of exploitation.

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2020-3527
ALT-PU-2021-1880
ALT-PU-2021-1964
BDU:2020-05895
CVE-2020-25743
ECHO-B09A-BD3C-2713

Affected Products

Alt Linux
Debian
Qemu