CVE-2020-35505
Publication date 28 May 2021
Last updated 24 July 2024
Ubuntu priority
A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| qemu | 24.10 oracular |
Fixed 1:6.0+dfsg-1~ubuntu3
|
| 24.04 LTS noble |
Fixed 1:6.0+dfsg-1~ubuntu3
|
|
| 22.04 LTS jammy |
Fixed 1:6.0+dfsg-1~ubuntu3
|
|
| 20.04 LTS focal |
Fixed 1:4.2-3ubuntu6.17
|
|
| 18.04 LTS bionic |
Fixed 1:2.11+dfsg-1ubuntu7.37
|
|
| 16.04 LTS xenial |
Vulnerable
|
|
| 14.04 LTS trusty |
Vulnerable
|
|
| qemu-kvm | 24.10 oracular | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release |
Notes
Patch details
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
4.4 · Medium
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | High |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
References
Related Ubuntu Security Notices (USN)
- USN-5010-1
- QEMU vulnerabilities
- 15 July 2021