REDHAT-BUG-1919210: Null Pointer Dereference
A NULL pointer dereference issue was found in the Floopy disk emulator of QEMU. It could occur while processing read/write ioport commands, if the selected Floopy drive is not initialised with a block device. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario.
Upstream patch: --------------- -> https://lists.nongnu.org/archive/html/qemu-devel/2021-01/msg05986.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1919210?
REDHAT-BUG-1919210 is classified as a critical vulnerability due to its potential to crash the QEMU process.
How do I fix REDHAT-BUG-1919210?
To resolve REDHAT-BUG-1919210, ensure that the Floopy drive is properly initialized with a block device.
Who is affected by REDHAT-BUG-1919210?
The vulnerability REDHAT-BUG-1919210 affects users of the QEMU emulator, specifically those utilizing the Floopy disk emulator without proper initialization.
What causes REDHAT-BUG-1919210?
REDHAT-BUG-1919210 is caused by a NULL pointer dereference when read/write IO port commands are processed for an uninitialized Floopy drive.
Can a guest user exploit REDHAT-BUG-1919210?
Yes, a privileged guest user can exploit REDHAT-BUG-1919210 to crash the QEMU process on the host system.