CVE-2020-25741

CVE-2020-25741

EPSS 0.4%

fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05295.html https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Ffdc_nullptr1 https://security.netapp.com/advisory/ntap-20201009-0005/http://www.openwall.com/lists/oss-security/2020/09/29/1