CVE-2020-35505

MEDIUM

QEMU < 6.0.0 - Denial of Service via am53c974 SCSI Host Bus Adapter Emulation

Title source: llm
STIX 2.1

Description

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

References (6)

Core 6
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2021/04/16/3
Mailing List, Patch, Third Party Advisory x_refsource_misc
https://www.openwall.com/lists/oss-security/2021/04/16/3
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1909769
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20210713-0006/
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202208-27
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html

Scores

CVSS v3 4.4
EPSS 0.0012
EPSS Percentile 30.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476
Status published
Products (3)
debian/debian_linux 10.0
qemu/qemu 6.0.0 rc1 (2 CPE variants)
qemu/qemu < 6.0.0
Published May 28, 2021
Tracked Since Feb 18, 2026