oss-sec mailing list archives
CVE-2021-20196 QEMU: block: fdc: null pointer dereference may lead to guest crash
From: P J P <ppandit () redhat com>
Date: Thu, 28 Jan 2021 12:29:04 +0530 (IST)
Hello,A NULL pointer dereference issue was found in the Floopy disk emulator of QEMU. It could occur while processing read/write ioport commands, if the selected Floopy drive is not initialised with a block device. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario.
Upstream patch: --------------- -> https://lists.nongnu.org/archive/html/qemu-devel/2021-01/msg05986.htmlThis issue was reported by Gaoning Pan of Zhejiang University & Ant Security Light-Year Lab.
Thank you. -- Prasad J Pandit / Red Hat Product Security Team 8685 545E B54C 486B C6EB 271E E285 8B5A F050 DE8D
Current thread:
- CVE-2021-20196 QEMU: block: fdc: null pointer dereference may lead to guest crash P J P (Jan 27)