Published: 02/12/2020 Updated: 30/09/2022

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 3.2 | Impact Score: 1.4 | Exploitability Score: 1.5

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu
debian debian linux 10.0

Debian Bug report logs - #975276 qemu: CVE-2020-25723 Package: src:qemu; Maintainer for src:qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 19 Nov 2020 21:33:02 UTC Severity: important Tags: security, upstream Found in version qemu/1 ...

A heap buffer overflow flaw was found in the iSCSI support of QEMU This flaw could lead to an out-of-bounds read access and possible information disclosure from the QEMU process memory to a malicious guest The highest threat from this vulnerability is to data confidentiality (CVE-2020-11947) An infinite loop flaw was found in the e1000e NIC emul ...

A reachable assertion issue was found in the USB EHCI emulation code of QEMU It could occur while processing USB requests due to missing handling of DMA memory map failure A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service ...

CWE-617 https://bugzilla.redhat.com/show_bug.cgi?id=1898579 https://security.netapp.com/advisory/ntap-20201218-0004/http://www.openwall.com/lists/oss-security/2020/12/22/1 https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975276 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2021-1671.html

CVE-2020-25723

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect