CVE-2020-25741 : fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference

fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.

Published 2020-10-02 09:15:14

Updated 2020-10-14 14:27:33

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2020-25741

Qemu » Qemu » Version: 5.0.0
cpe:2.3:a:qemu:qemu:5.0.0:-:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
3.2	LOW	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L	1.5	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: Low

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

http://www.openwall.com/lists/oss-security/2020/09/29/1

oss-security - QEMU: NULL pointer derefrence issues
Mailing List;Third Party Advisory

CVEs referencing this url
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Ffdc_nullptr1

fdc_nullptr1 - Files - sciebo
Third Party Advisory
https://security.netapp.com/advisory/ntap-20201009-0005/

October 2020 QEMU Vulnerabilities in NetApp Products | NetApp Product Security
Third Party Advisory

CVEs referencing this url
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05295.html

Re: [PATCH] fdc: check null block pointer before blk_pwrite
Mailing List;Patch;Third Party Advisory

Jump to