Vulnerability CVE-2020-35503

Vulnerability Name:

CVE-2020-35503 (CCN-202964)

Assigned:

2020-12-23

Published:

2020-12-23

Updated:

2022-05-13

Summary:

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVSS v3 Severity:

6.0 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
5.3 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:U/RC:R)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-476

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2020-35503

Source: CCN
Type: Red Hat Bugzilla Bug 1910346
(CVE-2020-35503) - CVE-2020-35503 QEMU: NULL pointer dereference issue in megasas-gen2 host bus adapter

Source: MISC
Type: Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1910346

Source: XF
Type: UNKNOWN
qemu-cve202035503-dos(202964)

Source: CONFIRM
Type: Third Party Advisory
https://security.netapp.com/advisory/ntap-20210720-0008/

Source: CCN
Type: QEMU Web site
QEMU

Vulnerable Configuration:

Configuration 1:

cpe:/a:qemu:qemu:*:*:*:*:*:*:*:* (Version <= 6.0.0)

Configuration 2:

cpe:/o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:qemu:qemu:2.12.50:*:*:*:*:*:*:*

OR cpe:/a:qemu:qemu:3.1.50:*:*:*:*:*:*:*

OR cpe:/a:qemu:qemu:3.0.0:-:*:*:*:*:*:*

OR cpe:/a:qemu:qemu:4.0.0:-:*:*:*:*:*:*

OR cpe:/a:qemu:qemu:4.1.0:-:*:*:*:*:*:*

OR cpe:/a:qemu:qemu:4.2.0:-:*:*:*:*:*:*

OR cpe:/a:qemu:qemu:5.0:*:*:*:*:*:*:*

OR cpe:/a:qemu:qemu:5.2.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8048	P	osc-0.182.0-150100.3.32.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:7981	P	vorbis-tools-1.4.0-1.53 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7791	P	qemu-tools-7.1.0-150500.47.15 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:51978	P	Security update for vim (Important)	2022-12-28
oval:org.opensuse.security:def:764	P	Security update for the Linux Kernel (Important)	2022-09-16
oval:org.opensuse.security:def:6137	P	Security update for cifs-utils (Moderate)	2022-08-12
oval:org.opensuse.security:def:3665	P	Security update for harfbuzz (Important)	2022-08-04
oval:org.opensuse.security:def:95428	P	Security update for MozillaThunderbird (Important) (in QA)	2022-08-01
oval:org.opensuse.security:def:95355	P	Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4) (Important)	2022-07-21
oval:org.opensuse.security:def:93144	P	(Important)	2022-07-06
oval:org.opensuse.security:def:3518	P	guile-2.0.9-9.3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3468	P	cyrus-sasl-2.1.26-8.7.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3187	P	libidn-tools-1.28-5.6.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:94580	P	hplip-devel-3.21.10-150400.1.9 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94817	P	qemu-tools-6.2.0-150400.35.10 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95148	P	qemu-6.2.0-150400.35.10 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:351	P	qemu-6.2.0-150400.35.10 on GA media (Moderate)	2022-06-10
oval:org.opensuse.security:def:93297	P	(Important)	2022-05-17
oval:org.opensuse.security:def:102141	P	Security update for python2-numpy (Moderate)	2022-03-31
oval:org.opensuse.security:def:99757	P	(Important)	2022-03-07
oval:org.opensuse.security:def:100068	P	(Important)	2022-01-25
oval:org.opensuse.security:def:6155	P	Security update for libvirt (Important)	2022-01-05
oval:org.opensuse.security:def:99164	P	(Moderate)	2021-12-03
oval:org.opensuse.security:def:88530	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:23990	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:126790	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:89214	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:127187	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:33736	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:59559	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:89472	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:33994	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:59817	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:88213	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:125623	P	Security update for qemu (Important)	2021-11-09
oval:org.opensuse.security:def:106248	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:92608	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:8858	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:69749	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:5880	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:66969	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:105659	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:9808	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:92019	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:106447	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:92807	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:9053	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:69948	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:99359	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:108807	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:105854	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:10170	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:92214	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:106734	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:92991	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:9416	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:70310	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:99558	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:76374	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:106049	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:10359	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:92409	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:8669	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:69556	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:98969	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:76037	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:111773	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:9609	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:70499	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:6217	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:67306	P	Security update for qemu (Important)	2021-11-04
oval:org.opensuse.security:def:83467	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:29438	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:55261	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:30140	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:55963	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:82645	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:30260	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:56083	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:83347	P	Security update for qemu (Important)	2021-10-28
oval:org.opensuse.security:def:102068	P	Security update for apache2 (Important)	2021-10-26
oval:org.opensuse.security:def:33001	P	Security update for qemu (Moderate)	2021-09-09
oval:org.opensuse.security:def:58824	P	Security update for qemu (Moderate)	2021-09-09
oval:org.opensuse.security:def:87465	P	Security update for qemu (Moderate)	2021-09-09
oval:org.opensuse.security:def:73876	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:76312	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:1625	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:69137	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:64754	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:111691	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:101495	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:67244	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:102201	P	Security update for qemu (Moderate)	2021-08-27
oval:org.opensuse.security:def:111033	P	Security update for qemu (Important)	2021-08-26
oval:org.opensuse.security:def:34514	P	Security update for qemu (Moderate)	2021-08-23
oval:org.opensuse.security:def:60337	P	Security update for qemu (Moderate)	2021-08-23
oval:org.opensuse.security:def:73679	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:108734	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:76294	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:117473	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:69070	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:64557	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:96062	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:42111	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:111672	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:102752	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:67226	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:118514	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:101293	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:75964	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:109418	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:5807	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:66896	P	Security update for qemu (Moderate)	2021-08-20
oval:org.opensuse.security:def:107959	P	Security update for qemu (Moderate)	2021-08-20

BACK