CVE-2020-25742: Null Pointer Dereference
First published: Mon Sep 28 2020(Updated: )
A null pointer dereference issue was found in the LSI53C895A SCSI Host Bus Adapter emulator of QEMU. It could occur while performing processing 'Memory Move' instructions to move data beteween dma memory and i/o address space via lsi_memcpy(). A guest user/process may use this flaw to crash the QEMU process resulting in DoS scenario. Upstream patch(proposed): -------------------------- -> <a href="https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05294.html">https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05294.html</a>
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/QEMU | <5.1.1 | 5.1.1 |
| QEMU KVM | <5.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2020/09/29/1
- https://bugzilla.redhat.com/show_bug.cgi?id=1883178
- https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05294.html
- https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Flsi_nullptr1
- https://www.openwall.com/lists/oss-security/2020/09/29/1
- https://www.manualslib.com/manual/1407578/Lsi-Lsi53c895a.html?page=254#manual
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1883180
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1883181
- https://access.redhat.com/security/cve/cve-2020-25742
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1973398
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1973398&action=edit
- https://samsung.manymanuals.com/
- https://lsi.manymanuals.com/
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-25742
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/qemu
- canonical/qemu kvm