Home

CVE-2020-35505

Description

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the Information Transfer command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Risk Information

Base Score
4.4
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.017

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in QEMU 5.2.0Windows
Machine emulator and virtualizer (USN-5010-1) qemu_5.0-5ubuntu9.9_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu_4.2-3ubuntu6.17_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu_5.2+dfsg-9ubuntu3.1_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu_2.11+dfsg-1ubuntu7.37_i386.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu_2.11+dfsg-1ubuntu7.37_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu-system_5.0-5ubuntu9.9_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu-system_4.2-3ubuntu6.17_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu-system_5.2+dfsg-9ubuntu3.1_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu-system_2.11+dfsg-1ubuntu7.37_i386.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu-system_2.11+dfsg-1ubuntu7.37_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu-system-x86_5.0-5ubuntu9.9_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu-system-x86_4.2-3ubuntu6.17_amd64.debLinux
Machine emulator and virtualizer (USN-5010-1) qemu-system-x86_5.2+dfsg-9ubuntu3.1_amd64.debLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-audio-alsa-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-audio-alsa-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-audio-oss-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-audio-oss-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-audio-pa-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-audio-pa-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-audio-sdl-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-audio-sdl-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-block-curl-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-block-curl-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-block-iscsi-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-block-iscsi-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-block-rbd-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-block-rbd-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-block-ssh-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-block-ssh-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-debugsource-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-guest-agent-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-guest-agent-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-ipxe-1.0.0+-57.2.noarch.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-kvm-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-lang-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-seabios-1.12.0_0_ga698c89-57.2.noarch.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-sgabios-8-57.2.noarch.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-tools-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-tools-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-ui-curses-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-ui-curses-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-ui-gtk-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-ui-gtk-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-ui-sdl-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-ui-sdl-debuginfo-3.1.1.1-57.2.x86_64.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-vgabios-1.12.0_0_ga698c89-57.2.noarch.rpmLinux
SUSE-SU-2021:2813-1(SUSE Linux Enterprise Server 12-SP5 ) qemu-x86-3.1.1.1-57.2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234