CVE-2020-25743
Summary
| CVE | CVE-2020-25743 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-10-06 15:15:00 UTC |
|---|
| Updated | 2020-10-07 13:31:00 UTC |
|---|
| Description | hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| oss-security - QEMU: NULL pointer derefrence issues |
CONFIRM |
www.openwall.com |
Mailing List, Patch, Third Party Advisory |
| 1881409 – (CVE-2020-25743) CVE-2020-25743 QEMU: ide: null pointer dereference while cancelling i/o operation |
MISC |
bugzilla.redhat.com |
Issue Tracking, Patch, Third Party Advisory |
| sciebo |
MISC |
ruhr-uni-bochum.sciebo.de |
Broken Link |
| Re: [PATCH v2] hw/ide: check null block before _cancel_dma_sync |
MISC |
lists.nongnu.org |
Patch, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 502353 Alpine Linux Security Update for qemu
- 671198 EulerOS Security Update for qemu (EulerOS-SA-2022-1034)
- 671203 EulerOS Security Update for qemu (EulerOS-SA-2022-1014)
- 900187 CBL-Mariner Linux Security Update for qemu-kvm 4.2.0
- 902827 Common Base Linux Mariner (CBL-Mariner) Security Update for qemu-kvm (3552)
