CVE-2020-25741 Information

Description

fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Reference

http://www.openwall.com/lists/oss-security/2020/09/29/1 https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05295.html https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=2Ffdc_nullptr1 https://security.netapp.com/advisory/ntap-20201009-0005/

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction Required

HIGH

Scope

NONE

Confidentiality Impact

CHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

LOW

Base Severity

3.2