Wind River Support Network

HomeDefectsLIN1021-259
Fixed

LIN1021-259 : Security Advisory - qemu - CVE-2021-20196

Created: May 24, 2021    Updated: Mar 16, 2022
Resolved Date: Mar 16, 2022
Found In Version: 10.21.20.1
Fix Version: 10.21.20.11
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

A NULL pointer dereference issue was found in the Floopy disk emulator of QEMU. It could occur while processing read/write ioport commands, if the selected Floopy drive is not initialised with a block device. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario.

https://lists.nongnu.org/archive/html/qemu-devel/2021-01/msg05986.html

CREATE(Triage):(User=admin) CVE-2021-20196 (https://nvd.nist.gov/vuln/detail/CVE-2021-20196)

CVEs


Live chat
Online