CVE-2020-35505CWE-476

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0

published May 28, 2021

CVSS
—
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-05-28T10:20Z
EPSS history
Timeline
  • 28 MAY 10:20Z
    A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0
    cvelistv5