QwikSec

Security Database

CVE

CWE

Training

CVE-2021-20196

Published: May 26, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Vendor	Product	Versions
n/a	qemu	affected `vulnerable up to (including) qemu 5.2.0`

Weaknesses (CWE)

References

https://bugs.launchpad.net/qemu/+bug/1912780

x_refsource_MISC

https://www.openwall.com/lists/oss-security/2021/01/28/1

x_refsource_MISC

https://security.netapp.com/advisory/ntap-20210708-0004/

x_refsource_CONFIRM

[debian-lts-announce] 20220404 [SECURITY] [DLA 2970-1] qemu security update

mailing-list

x_refsource_MLIST

[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.