Wind River Support Network

HomeDefectsLIN1019-5977
Fixed

LIN1019-5977 : Security Advisory - qemu - CVE-2021-20196

Created: Jan 24, 2021    Updated: Mar 28, 2022
Resolved Date: Feb 24, 2022
Found In Version: 10.19.45.1
Fix Version: 10.19.45.22
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

A NULL pointer dereference issue was found in the Floopy disk emulator of QEMU. It could occur while processing read/write ioport commands, if the selected Floopy drive is not initialised with a block device. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario.

https://lists.nongnu.org/archive/html/qemu-devel/2021-01/msg05986.html

CREATE(Triage):(User=admin) CVE-2021-20196 (https://nvd.nist.gov/vuln/detail/CVE-2021-20196)

CVEs


Live chat
Online