CVE-2020-35503 — NULL Pointer Dereference in Qemu

CWE-476 — NULL Pointer Dereference6 documents6 sources
Severity
6.0MEDIUMNVD
EPSS
0.0%
top 93.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
QemuFedoraproject FedoraDebian Qemu+1 more
Timeline
PublishedJun 2
Latest updateMay 24

Description

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:HExploitability: 1.5 | Impact: 4.0

Affected Packages4 packages

▶NVDqemu/qemu6.0.0
▶CVEListV5qemu/qemuAll QEMU versions before and including 6.0
▶debiandebian/qemu

Also affects: Fedora 33

🔴Vulnerability Details

2
GHSA
GHSA-x852-p4x4-vcgf: A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6↗2022-05-24
▶
OSV
CVE-2020-35503: A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6↗2021-06-02
▶

📋Vendor Advisories

3
Microsoft
A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callbac↗2021-06-08
▶
Red Hat
QEMU: NULL pointer dereference issue in megasas-gen2 host bus adapter↗2020-12-23
▶
Debian
CVE-2020-35503: qemu - A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adap...↗2020
▶