qemu:qemu-fuzz-i386-target-generic-fuzz-am53c974: Heap-buffer-overflow in scsi_disk_emulate_write_data

Detailed Report: https://oss-fuzz.com/testcase?key=5170622128324608 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-am53c974 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f0dfce95000 Crash State:...

CVE-2020-35505: NULL Pointer Dereference

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of...

CVE-2020-35506: Use After Free

A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the 'Information Transfer' command CMDTI. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of servi...