CVE-2020-13659: Null Pointer Dereference
Published Jun 2, 2020
·Updated
addressspacemap in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.
Affected Software
17 affected componentsFixes available
Qemu Qemu=4.2.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
openSUSE Leap=15.2
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=20.04
debian/qemu
1:7.2+dfsg-7+deb12u181:7.2+dfsg-7+deb12u151:10.0.13+ds-0+deb13u11:10.0.2+ds-2+deb13u11:11.1.2+ds-31:11.1.3+ds-1
alpine/qemu<5.0.0-r0
5.0.0-r0
alpine/qemu<5.0.0-r0
5.0.0-r0
alpine/qemu<5.0.0-r0
5.0.0-r0
alpine/qemu<5.0.0-r0
5.0.0-r0
alpine/qemu<5.0.0-r0
5.0.0-r0
alpine/qemu<5.0.0-r0
5.0.0-r0
alpine/qemu<5.0.0-r0
5.0.0-r0
alpine/qemu<5.0.0-r0
5.0.0-r0
alpine/qemu<5.0.0-r0
5.0.0-r0
Remediation
Patch Available
Event History
Jun 2, 2020
CVE Published
via MITRE·12:50 PM
Data Sourced
via MITRE·12:50 PM
Description
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·01:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-13659?
CVE-2020-13659 is a vulnerability in QEMU that can trigger a NULL pointer dereference related to BounceBuffer.
2
What is the severity of CVE-2020-13659?
CVE-2020-13659 has a severity value of 2.5, which is considered low.
3
Which software versions are affected by CVE-2020-13659?
CVE-2020-13659 affects QEMU versions 4.2.0 and potentially earlier versions.
4
How can I fix CVE-2020-13659?
To fix CVE-2020-13659, you should update QEMU to version 4.2.0 (or a later version if available) that includes the necessary patches.
5
Where can I find more information about CVE-2020-13659?
You can find more information about CVE-2020-13659 in the references provided: [1] [2] [3].