CVE-2020-25743: Null Pointer Dereference
First published: Tue Sep 22 2020(Updated: )
A null pointer dereference issue was found in the IDE disk emulator of QEMU. It could occur while cancelling an i/o operation via ide_cancel_dma_sync() routine, if a block drive pointer is null. A guest may use this flaw to crash the QEMU process on the host resulting in DoS scenario. Upstream patch: --------------- -> <a href="https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg01568.html">https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg01568.html</a>
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/QEMU | <5.1.1 | 5.1.1 |
| QEMU qemu | <5.1.1 | |
| Redhat Openstack Platform | =13.0 | |
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux | =8.0 | |
| Redhat Enterprise Linux | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg01568.html
- https://www.openwall.com/lists/oss-security/2020/09/29/1
- https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Fide_nullptr1b
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1883453
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1883454
- https://bugzilla.redhat.com/show_bug.cgi?id=1881409
- http://www.openwall.com/lists/oss-security/2020/09/29/1
- https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05967.html
Frequently Asked Questions
What is CVE-2020-25743?
CVE-2020-25743 is a vulnerability in QEMU before 5.1.1 that can trigger a NULL pointer dereference.
How does CVE-2020-25743 occur?
CVE-2020-25743 occurs because of a lack of pointer check before an ide_cancel_dma_sync call in QEMU.
What is the severity of CVE-2020-25743?
The severity of CVE-2020-25743 is low with a severity value of 3.2.
Which software versions are affected by CVE-2020-25743?
QEMU versions before 5.1.1 are affected by CVE-2020-25743.
Where can I find more information about CVE-2020-25743?
More information about CVE-2020-25743 can be found at the following references: [1], [2], [3].
- collector/redhat-bugzilla
- alias/CVE-2020-25743
- collector/nvd-index
- agent/type
- package-manager/redhat
- vendor/qemu
- canonical/qemu qemu
- vendor/redhat
- canonical/redhat openstack platform
- version/redhat openstack platform/13.0
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/8.0