CVE-2020-25723
published 2020-12-02CVE-2020-25723: A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA…
PriorityP49low3.2CVSS 3.1
AVLACLPRHUINSCCNINAL
EPSS
0.36%
27.8th percentile
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | qemu | < qemu 1:5.2+dfsg-1 (bookworm) | qemu 1:5.2+dfsg-1 (bookworm) |
| msrc | cm1_qemu-kvm_4.2.0-22_on_cbl_mariner_1.0 | — | — |
| qemu | qemu | <= 5.1.1 | — |
| qemu | qemu | — | — |
| qemu | qemu | >= 0 < 1:5.2+dfsg-1 | 1:5.2+dfsg-1 |
| qemu | qemu | >= 0 < 1:5.2+dfsg-1 | 1:5.2+dfsg-1 |
| qemu | qemu | >= 0 < 1:5.2+dfsg-1 | 1:5.2+dfsg-1 |
| qemu | qemu | >= 0 < 1:5.2+dfsg-1 | 1:5.2+dfsg-1 |
| qemu | qemu | >= 0 < 1:2.5+dfsg-5ubuntu10.48 | 1:2.5+dfsg-5ubuntu10.48 |
| qemu | qemu | >= 0 < 1:2.11+dfsg-1ubuntu7.34 | 1:2.11+dfsg-1ubuntu7.34 |
| qemu | qemu | >= 0 < 1:4.2-3ubuntu6.10 | 1:4.2-3ubuntu6.10 |
| ubuntu | qemu | — | — |
CVSS provenance
nvdv3.13.2LOWCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv6.3MEDIUM
vendor_ubuntu6.3MEDIUM
vendor_debian3.2LOW
vendor_msrc3.2LOW
vendor_redhat3.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4mvg-7php-mg7f: A reachable assertion issue was found in the USB EHCI emulation code of QEMU
ghsa_unreviewed·2022-05-24
CVE-2020-25723 [MEDIUM] CWE-617 GHSA-4mvg-7php-mg7f: A reachable assertion issue was found in the USB EHCI emulation code of QEMU
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.
OSV
CVE-2020-25723: A reachable assertion issue was found in the USB EHCI emulation code of QEMU
osv·2020-12-02·CVSS 3.2
CVE-2020-25723 [LOW] CVE-2020-25723: A reachable assertion issue was found in the USB EHCI emulation code of QEMU
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.
OSV
qemu vulnerabilities
osv·2020-11-30·CVSS 6.3
CVE-2020-17380 [MEDIUM] qemu vulnerabilities
qemu vulnerabilities
Alexander Bulekov discovered that QEMU incorrectly handled SDHCI device
emulation. An attacker inside the guest could use this issue to cause QEMU
to crash, resulting in a denial of service, or possibly execute arbitrary
code on the host. In the default installation, when QEMU is used with
libvirt, attackers would be isolated by the libvirt AppArmor profile.
(CVE-2020-17380)
Sergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU
incorrectly handled USB device emulation. An attacker inside the guest
could use this issue to cause QEMU to crash, resulting in a denial of
service. (CVE-2020-25084)
Sergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU
incorrectly handled SDHCI device emulation. An attacker inside the guest
could
Ubuntu
QEMU regression
vendor_ubuntu·2026-06-28·CVSS 3.8
CVE-2020-11947 [LOW] QEMU regression
Title: QEMU regression
Summary: USN-8412-1 introduced a regression in QEMU
USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for
CVE-2024-4467 was incomplete and prevented the creation of boot volumes
from qcow2 images. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the
iSCSI block driver in QEMU incorrectly handled certain responses from an
iSCSI server. A remote attacker could possibly use this issue to cause
QEMU to crash, resulting in a denial of service, or possibly execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-1711)
It was discovered that the iSCSI block driver in QEMU incorrectly handled
certain memory operations
Ubuntu
QEMU vulnerabilities
vendor_ubuntu·2026-06-09·CVSS 3.8
CVE-2021-3416 [LOW] QEMU vulnerabilities
Title: QEMU vulnerabilities
Summary: Several security issues were fixed in QEMU.
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the
iSCSI block driver in QEMU incorrectly handled certain responses from an
iSCSI server. A remote attacker could possibly use this issue to cause QEMU
to crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-1711)
It was discovered that the iSCSI block driver in QEMU incorrectly handled
certain memory operations, leading to a heap-based buffer over-read. An
attacker could possibly use this issue to expose sensitive information from
the host. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-11947)
Ziming Zhang discovered that the SM501 display driver in QEM
Microsoft
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged use
vendor_msrc·2020-12-08·CVSS 3.2
CVE-2020-25723 [LOW] CWE-617 A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged use
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host resulting in a denial of service.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publis
Ubuntu
QEMU vulnerabilities
vendor_ubuntu·2020-11-30·CVSS 6.3
CVE-2020-25624 [MEDIUM] QEMU vulnerabilities
Title: QEMU vulnerabilities
Summary: Several security issues were fixed in QEMU.
Alexander Bulekov discovered that QEMU incorrectly handled SDHCI device
emulation. An attacker inside the guest could use this issue to cause QEMU
to crash, resulting in a denial of service, or possibly execute arbitrary
code on the host. In the default installation, when QEMU is used with
libvirt, attackers would be isolated by the libvirt AppArmor profile.
(CVE-2020-17380)
Sergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU
incorrectly handled USB device emulation. An attacker inside the guest
could use this issue to cause QEMU to crash, resulting in a denial of
service. (CVE-2020-25084)
Sergej Schumilo, Cornelius Aschermann, and Simon Wrner discovered that QEMU
incorrectly handle
Red Hat
QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c
vendor_redhat·2020-08-12·CVSS 3.2
CVE-2020-25723 [LOW] CWE-617 QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c
QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.
A reachable assertion vulnerability was found in the USB EHCI emulation code of QEMU. This issue occurs while processing USB requests due to missed handling of DMA memory map failure. This flaw allows a malicious privileged user within the guest to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerabil
Debian
CVE-2020-25723: qemu - A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It...
vendor_debian·2020·CVSS 3.2
CVE-2020-25723 [LOW] CVE-2020-25723: qemu - A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It...
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.
Scope: local
bookworm: resolved (fixed in 1:5.2+dfsg-1)
bullseye: resolved (fixed in 1:5.2+dfsg-1)
forky: resolved (fixed in 1:5.2+dfsg-1)
sid: resolved (fixed in 1:5.2+dfsg-1)
trixie: resolved (fixed in 1:5.2+dfsg-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.openwall.com/lists/oss-security/2020/12/22/1https://bugzilla.redhat.com/show_bug.cgi?id=1898579https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlhttps://security.netapp.com/advisory/ntap-20201218-0004/http://www.openwall.com/lists/oss-security/2020/12/22/1https://bugzilla.redhat.com/show_bug.cgi?id=1898579https://lists.debian.org/debian-lts-announce/2022/09/msg00008.htmlhttps://security.netapp.com/advisory/ntap-20201218-0004/
2020-12-02
Published