PT-2020-5189
CVE-2020-13659
·
Published
2020-05-02
·
Updated
2024-06-15
Description by
CVSS 3.1
2.5
LowMetricsAV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
QEMU version 4.2.0
Description
The issue is related to a NULL pointer dereference in the
address space map function in exec.c, which is connected to BounceBuffer. This can potentially lead to a denial of service.Recommendations
For QEMU version 4.2.0, consider updating to a newer version that contains a fix for this issue, as the current version can trigger a NULL pointer dereference related to
BounceBuffer.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾