Ubuntu.comUB:CVE-2020-35505CVE-2020-35505
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
13.3%
A NULL pointer dereference flaw was found in the am53c974 SCSI host bus
adapter emulation of QEMU in versions before 6.0.0. This issue occurs while
handling the ‘Information Transfer’ command. This flaw allows a privileged
guest user to crash the QEMU process on the host, resulting in a denial of
service. The highest threat from this vulnerability is to system
availability.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=1909769>
- <https://bugs.launchpad.net/qemu/+bug/1910723>
Notes
| Author | Note |
|---|---|
| mdeslaur | same commits as CVE-2020-35504 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | qemu | < 1:2.11+dfsg-1ubuntu7.37 | UNKNOWN |
| ubuntu | 20.04 | noarch | qemu | < 1:4.2-3ubuntu6.17 | UNKNOWN |
| ubuntu | 20.10 | noarch | qemu | < 1:5.0-5ubuntu9.9 | UNKNOWN |
| ubuntu | 21.04 | noarch | qemu | < 1:5.2+dfsg-9ubuntu3.1 | UNKNOWN |
| ubuntu | 21.10 | noarch | qemu | < 1:6.0+dfsg-1~ubuntu3 | UNKNOWN |
| ubuntu | 22.04 | noarch | qemu | < 1:6.0+dfsg-1~ubuntu3 | UNKNOWN |
| ubuntu | 22.10 | noarch | qemu | < 1:6.0+dfsg-1~ubuntu3 | UNKNOWN |
| ubuntu | 23.04 | noarch | qemu | < 1:6.0+dfsg-1~ubuntu3 | UNKNOWN |
| ubuntu | 23.10 | noarch | qemu | < 1:6.0+dfsg-1~ubuntu3 | UNKNOWN |
| ubuntu | 14.04 | noarch | qemu | < any | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2020-35505
lists.gnu.org/archive/html/qemu-devel/2021-03/msg06550.html
lists.gnu.org/archive/html/qemu-devel/2021-04/msg01000.html
nvd.nist.gov/vuln/detail/CVE-2020-35505
security-tracker.debian.org/tracker/CVE-2020-35505
ubuntu.com/security/notices/USN-5010-1
www.cve.org/CVERecord?id=CVE-2020-35505
Related
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
13.3%