Denial Of Service (DoS)

🗓️ 12 Aug 2021 15:21:35Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

qemu:devel vulnerability in SCSI host bus adapter emulatio

Reporter	Title	Published	Views	Family All 105
AlpineLinux	CVE-2020-35505	28 May 202110:20	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в qemu	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the SCSI am53c974 adapter driver in the hardware emulation software QEMU allows a hacker to induce a service failure.	19 Sep 202200:00	–	bdu_fstec
CBLMariner	CVE-2020-35505 affecting package qemu-kvm 4.2.0-45	24 Nov 202200:45	–	cbl_mariner
CNNVD	QEMU 代码问题漏洞	16 Apr 202100:00	–	cnnvd
CNVD	QEMU Null Pointer Dereference Vulnerability (CNVD-2021-41094)	31 May 202100:00	–	cnvd
CVE	CVE-2020-35505	28 May 202110:20	–	cve
Cvelist	CVE-2020-35505	28 May 202110:20	–	cvelist
Debian	[SECURITY] [DLA 3099-1] qemu security update	5 Sep 202203:28	–	debian
Debian CVE	CVE-2020-35505	28 May 202110:20	–	debiancve

Vulners

Node

devel develMatch1:5.0-5ubuntu7debian

AND

devel develMatch1:5.0-5ubuntu6debian

AND

devel develMatch1:5.1+dfsg-4ubuntu1debian

AND

devel develMatch1:5.1+dfsg-4ubuntu2debian

AND

debian debian_linux

OR

google bionicMatch1:2.11+dfsg-1ubuntu7debian

AND

google bionicMatch1:2.11+dfsg-1ubuntu7.32debian

AND

google bionicMatch1:2.11+dfsg-1ubuntu7.31debian

AND

google bionicMatch1:2.11+dfsg-1ubuntu7.33debian

AND

debian debian_linux

OR

focal focalMatch1:4.2-3ubuntu6.4debian

AND

focal focalMatch1:4.2-3ubuntu6.9debian

AND

focal focalMatch1:4.2-3ubuntu6debian

AND

focal focalMatch1:4.2-3ubuntu6.5debian

AND

focal focalMatch1:4.2-3ubuntu6.6debian

AND

debian debian_linux

OR

hirsute hirsuteMatch1:5.1+dfsg-4ubuntu2debian

AND

hirsute hirsuteMatch1:5.1+dfsg-4ubuntu1debian

AND

debian debian_linux

OR

apache groovyMatch1:5.0-5ubuntu6debian

AND

apache groovyMatch1:5.0-5ubuntu9.1debian

AND

apache groovyMatch1:5.0-5ubuntu9debian

AND

apache groovyMatch1:5.0-5ubuntu7debian

AND

debian debian_linux

OR

qemu qemuMatch1:5.1+dfsg-4debian

AND

qemu qemuMatch1:5.1+dfsg-4+b1debian

AND

qemu qemuMatch1:5.1+dfsg-4+b2debian

AND

debian debian_linuxMatch999

OR

qemu qemuMatch5.2.0-r2os

AND

qemu qemuMatch5.2.0-r3os

AND

qemu qemuMatch4.2.0-r2os

AND

qemu qemuMatch5.0.0-r0os

AND

qemu qemuMatch5.2.0-r4os

AND

alpinelinux alpine_linuxMatchedge

OR

qemu qemuMatch1:3.1+dfsg-8+deb10u8debian

AND

debian debian_linuxMatch10

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/09/msg00008.html
git	www.git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2020-35505
security	www.security.gentoo.org/glsa/202208-27
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20210713-0006/
openwall	www.openwall.com/lists/oss-security/2021/04/16/3
openwall	www.openwall.com/lists/oss-security/2021/04/16/3

22 Sep 2022 22:26Current

3Low risk

Vulners AI Score3

CVSS 22.1

CVSS 3.14.4

EPSS0.00077

denial of service null pointer dereference information transfer privileged guest user qemu process system availability software.