CVE-2021-20196
Summary
| CVE | CVE-2021-20196 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-05-26 22:15:00 UTC |
|---|
| Updated | 2023-02-12 22:15:00 UTC |
|---|
| Description | A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| 1919210 – (CVE-2021-20196) CVE-2021-20196 QEMU: block: fdc: null pointer dereference may lead to guest crash |
MISC |
bugzilla.redhat.com |
|
| [SECURITY] [DLA 3099-1] qemu security update |
MLIST |
lists.debian.org |
|
| Bug #1912780 “QEMU: Null Pointer Failure in fdctrl_read() in hw/...” : Bugs : QEMU |
MISC |
bugs.launchpad.net |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| [SECURITY] [DLA 2970-1] qemu security update |
MLIST |
lists.debian.org |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| CVE-2021-20196 QEMU Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| oss-security - CVE-2021-20196 QEMU: block: fdc: null pointer dereference may lead
to guest crash |
MISC |
www.openwall.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159638 Oracle Enterprise Linux Security Update for qemu (ELSA-2022-9123)
- 159672 Oracle Enterprise Linux Security Update for kvm_utils (ELSA-2022-9172)
- 159858 Oracle Enterprise Linux Security Update for virt:ol and virt-devel:ol (ELSA-2022-1759)
- 179172 Debian Security Update for qemu (DLA 2970-1)
- 180995 Debian Security Update for qemu (DLA 3099-1)
- 182006 Debian Security Update for qemu (CVE-2021-20196)
- 198683 Ubuntu Security Notification for QEMU Vulnerabilities (USN-5307-1)
- 240292 Red Hat Update for virt:rhel and virt-devel:rhel security (RHSA-2022:1759)
- 355320 Amazon Linux Security Advisory for qemu : ALAS2-2023-2061
- 502168 Alpine Linux Security Update for qemu
- 751661 OpenSUSE Security Update for qemu (openSUSE-SU-2022:0177-1)
- 751671 OpenSUSE Security Update for qemu (openSUSE-SU-2022:0210-1)
- 751742 OpenSUSE Security Update for qemu (openSUSE-SU-2022:0210-2)
- 751985 SUSE Enterprise Linux Security Update for qemu (SUSE-SU-2022:0177-1)
- 752033 SUSE Enterprise Linux Security Update for qemu (SUSE-SU-2022:1151-1)
- 940525 AlmaLinux Security Update for virt:rhel and virt-devel:rhel (ALSA-2022:1759)
- 960314 Rocky Linux Security Update for virt:rhel and virt-devel:rhel (RLSA-2022:1759)
